Fuzzing from First Principles with Alisa Esage

Join us with Alisa Esage for a livestream on "Fuzzing from First Principles!" This session will have a theoretical part and a practical part (light-weight). In the theoretical part Alisa will walk through a few slides to quickly plunge into the mathematical core of fuzzing, what she calls the first principles. Understanding those principles sets us free from specific fuzzing tools and techniques, and enables to invent new ones, that are ideally suited for the problem at hand. In the practical part Alisa will go through her past successes with fuzzing, looking at the samples of vulnerabilities found in different classes of software, and show or explain what exactly she did to find the bug and why it worked (leveraging the First Principles theory).
Slides: zerodayenginee...
Alisa Esage
Twitter: / alisaesage
KZbin: / @alisaesage
Zero Day Engineering
Twitter: / zerodaytraining
KZbin: / @alisaesage
Telegram: t.me/zerodaytr...
Discord: / discord
Website: zerodayenginee...

[@thatguyidk123]

I thoroughly enjoyed the engineering probability and statistics its been years (2018) since i took that class in college loved the live stream very interesting

[@camelotenglishtuition6394]

Awesome work! Great to listen to!

[@thezar86]

Will the slides be available? Thanks and great work to Alisa, excellent job!

[@OffByOneSecurity]

They are now in the description.

[@hannahprobably5765]

Superb video, please more top tech deep dives❤😊

[@ethicalmath3963]

great stream, thanks

[@andrer.6127]

Wait, what is the chain rule for probability? Was that just an example?

[@HandsomWare]

where there is a constant background noise like the microwave radiation ? maybe some external audio is being picked up. Can it be cleaned up stephen ?

[@Jamonpeligroso]

rofl at the people getting triggered by the presence of math in a presentation

[@IwillBeback-gl9rz]

This is complete non sense. Alisa made up numbers, the complexity of her challenge is 2¹⁶ so 65k execution (super easy) not 2⁸⁰. She said coverage guided fuzzing is not working but it is literally the standard. She used outdated tool like radamsa or Dharma while she didnt even mentionned modern tools. From all the example she showed NONE were interesting she didn't even took the time to explain what is happening exactly. Overall this 2 hours talk is a waste of time, a mix between false information and wrong assumptions. It doesnt fool anyone, and people actually aware of modern fuzzing techniques can see clearly she doesn't understand half of what she says. BS...

[@sarahconnorh4609]

There is absolutely *nothing* coming out of this 2 hours stream. A mix between non-sense math and false affirmation about fuzzing techniques she doesn't seem to even understand, frankly sad to see that