Fuzzing

NOTE: we are collecting these here… Initially most of them will of course mainly be presentations given by us. We are only adding those that are publicly available.

2008:
“Experiences with Model Inference Assisted Fuzzing” by Viide et al. at WOOT 2008: http://www.ee.oulu.fi/research/ouspg/protos/sota/woot08-experiences/

“Fuzz by number” by Charlie Miller at CanSecWest 2008: http://cansecwest.com/csw08/csw08-miller.pdf

“Fuzzing WTF?” by Mikko Varpiola and Nate Kube at CanSecWest 2008: http://cansecwest.com/csw08/csw08-marcus-varpiola.pdf

“Fuzzing the Security Perimeters” by Ari Takanen at CSI-SX: http://www.slideshare.net/digitallibrary/fuzzing-the-security-perimeters

“Fuzzing（ファジング）について” (Japanese translation) by Ari Takanen: http://www.toyo.co.jp/it/codenomicon/pdf/Fuzzing_overview.pdf

2007:
“Revolutionizing the Field of Grey-box Attack Surface Testing with Evolutionary Fuzzing” by Jared DeMott at Blackhat 2007: https://www.blackhat.com/presentations/bh-usa-07/DeMott_Enbody_and_Punch/Presentation/bh-usa-07-demott_enbody_and_punch.pdf

“Real World Fuzzing” by Charlie Miller at ToorCon 2007: http://www.toorcon.org/2007/talks/60/real_world_fuzzing.pdf

2005:
“The Art of SIP fuzzing and Vulnerabilities Found in VoIP” by Mikko Varpiola at Blackhat 2005: http://www.blackhat.com/presentations/bh-usa-05/bh-us-05-nuwere/bh-us-05-nuwere.pdf

“Fuzz Revisited” presentation by Barton Miller: http://www.cs.wisc.edu/~bart/fuzz/fuzz-revisited-talk.pdf

“Fuzzing” by Ilja van Sprundel: http://events.ccc.de/congress/2005/fahrplan/attachments/683-slides_fuzzing.pdf

2004:
“Robustness testing - black-box testing for software security” by Ari Takanen at CERIAS: MP4

2002:
“PROTOS - systematic approach to eliminate software vulnerabilities” presentation at Microsoft by Röning, Laakso, Takanen, Kaksonen: http://www.ee.oulu.fi/research/ouspg/protos/sota/MSR2002-protos/

“Vulnerabilities go mobile” by Varpiola and Laakso at AusCERT Asia Pacific Information Technology Security Conference 2002: http://www.ee.oulu.fi/research/ouspg/protos/sota/AusCERT2002-mobile/index.html

2001:
“Software Security Assessment through Specification Mutations and Fault Injection” by Kaksonen, Laakso and Takanen at CMS 2001: http://www.ee.oulu.fi/research/ouspg/protos/analysis/CMS2001-spec-centered/index.html

Please let us know if you see something missing!