aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDmitry Vyukov <dvyukov@google.com>2018-09-24 12:11:57 +0200
committerDmitry Vyukov <dvyukov@google.com>2018-09-24 12:11:57 +0200
commit2f485cdfa912e521007b14e6198d1bda25cdb074 (patch)
tree8f379d7b3b0a4486e46cb6503de3badb2a9c1a80
parent7ffd14ab85c68206fc31c61c889c63dc7770089e (diff)
docs: add research work based on syzkaller
-rw-r--r--README.md2
-rw-r--r--docs/research.md8
2 files changed, 10 insertions, 0 deletions
diff --git a/README.md b/README.md
index 581fa52a6..855747ce7 100644
--- a/README.md
+++ b/README.md
@@ -23,6 +23,7 @@ For other OS kernels check: [Akaros](docs/akaros/README.md), [FreeBSD](docs/free
## External Articles
+ - [Research work based on syzkaller](docs/research.md)
- From [HardenedLinux](https://github.com/hardenedlinux) project:
- [Kernel QA with syzkaller and qemu](https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/docs/harbian_qa/fuzz_testing/syzkaller_general.md) (tutorial on how to setup syzkaller with qemu)
- [Syzkaller crash DEMO](https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/docs/harbian_qa/fuzz_testing/syzkaller_crash_demo.md) (tutorial on how to extend syzkaller with new syscalls)
@@ -34,6 +35,7 @@ For other OS kernels check: [Akaros](docs/akaros/README.md), [FreeBSD](docs/free
- [Debugging a kernel crash found by syzkaller](http://vegardno.blogspot.de/2016/08/sync-debug.html) (by Quentin Casasnovas)
- [Linux Plumbers 2016 talk slides](https://docs.google.com/presentation/d/1iAuTvzt_xvDzS2misXwlYko_VDvpvCmDevMOq2rXIcA/edit?usp=sharing)
- [syzkaller: the next gen kernel fuzzer](https://www.slideshare.net/DmitryVyukov/syzkaller-the-next-gen-kernel-fuzzer) (basics of operations, tutorial on how to run syzkaller and how to extend it to fuzz new drivers)
+ - [syzbot and the tale of thousand kernel bugs](https://events.linuxfoundation.org/wp-content/uploads/2017/11/Syzbot-and-the-Tale-of-Thousand-Kernel-Bugs-Dmitry-Vyukov-Google.pdf) [[video](https://www.youtube.com/watch?v=qrBVXxZDVQY)]
## Disclaimer
diff --git a/docs/research.md b/docs/research.md
new file mode 100644
index 000000000..fe61921fa
--- /dev/null
+++ b/docs/research.md
@@ -0,0 +1,8 @@
+# Research work based on syzkaller
+
+* [DIFUZE: Interface Aware Fuzzing for Kernel Drivers](https://acmccs.github.io/papers/p2123-corinaA.pdf)
+* [MoonShine: Optimizing OS Fuzzer Seed Selection with Trace Distillation](http://www.cs.columbia.edu/~suman/docs/moonshine.pdf)
+* [RAZZER: Finding Kernel Race Bugs through Fuzzing](https://lifeasageek.github.io/papers/jeong:razzer.pdf)
+* [SemFuzz: Semantics-based Automatic Generation of Proof-of-Concept Exploits](https://www.informatics.indiana.edu/xw7/papers/p2139-you.pdf)
+* [Towards Automating Exploit Generation for Arbitrary Types of Kernel Vulnerabilities](https://i.blackhat.com/us-18/Thu-August-9/us-18-Wu-Towards-Automating-Exploit-Generation-For-Arbitrary-Types-of-Kernel-Vulnerabilities-wp.pdf)
+* [Synthesis of Linux Kernel Fuzzing Tools Based on Syscall](http://dpi-proceedings.com/index.php/dtcse/article/download/14990/14503)