From 2f485cdfa912e521007b14e6198d1bda25cdb074 Mon Sep 17 00:00:00 2001 From: Dmitry Vyukov Date: Mon, 24 Sep 2018 12:11:57 +0200 Subject: docs: add research work based on syzkaller --- README.md | 2 ++ docs/research.md | 8 ++++++++ 2 files changed, 10 insertions(+) create mode 100644 docs/research.md diff --git a/README.md b/README.md index 581fa52a6..855747ce7 100644 --- a/README.md +++ b/README.md @@ -23,6 +23,7 @@ For other OS kernels check: [Akaros](docs/akaros/README.md), [FreeBSD](docs/free ## External Articles + - [Research work based on syzkaller](docs/research.md) - From [HardenedLinux](https://github.com/hardenedlinux) project: - [Kernel QA with syzkaller and qemu](https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/docs/harbian_qa/fuzz_testing/syzkaller_general.md) (tutorial on how to setup syzkaller with qemu) - [Syzkaller crash DEMO](https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/docs/harbian_qa/fuzz_testing/syzkaller_crash_demo.md) (tutorial on how to extend syzkaller with new syscalls) @@ -34,6 +35,7 @@ For other OS kernels check: [Akaros](docs/akaros/README.md), [FreeBSD](docs/free - [Debugging a kernel crash found by syzkaller](http://vegardno.blogspot.de/2016/08/sync-debug.html) (by Quentin Casasnovas) - [Linux Plumbers 2016 talk slides](https://docs.google.com/presentation/d/1iAuTvzt_xvDzS2misXwlYko_VDvpvCmDevMOq2rXIcA/edit?usp=sharing) - [syzkaller: the next gen kernel fuzzer](https://www.slideshare.net/DmitryVyukov/syzkaller-the-next-gen-kernel-fuzzer) (basics of operations, tutorial on how to run syzkaller and how to extend it to fuzz new drivers) + - [syzbot and the tale of thousand kernel bugs](https://events.linuxfoundation.org/wp-content/uploads/2017/11/Syzbot-and-the-Tale-of-Thousand-Kernel-Bugs-Dmitry-Vyukov-Google.pdf) [[video](https://www.youtube.com/watch?v=qrBVXxZDVQY)] ## Disclaimer diff --git a/docs/research.md b/docs/research.md new file mode 100644 index 000000000..fe61921fa --- /dev/null +++ b/docs/research.md @@ -0,0 +1,8 @@ +# Research work based on syzkaller + +* [DIFUZE: Interface Aware Fuzzing for Kernel Drivers](https://acmccs.github.io/papers/p2123-corinaA.pdf) +* [MoonShine: Optimizing OS Fuzzer Seed Selection with Trace Distillation](http://www.cs.columbia.edu/~suman/docs/moonshine.pdf) +* [RAZZER: Finding Kernel Race Bugs through Fuzzing](https://lifeasageek.github.io/papers/jeong:razzer.pdf) +* [SemFuzz: Semantics-based Automatic Generation of Proof-of-Concept Exploits](https://www.informatics.indiana.edu/xw7/papers/p2139-you.pdf) +* [Towards Automating Exploit Generation for Arbitrary Types of Kernel Vulnerabilities](https://i.blackhat.com/us-18/Thu-August-9/us-18-Wu-Towards-Automating-Exploit-Generation-For-Arbitrary-Types-of-Kernel-Vulnerabilities-wp.pdf) +* [Synthesis of Linux Kernel Fuzzing Tools Based on Syscall](http://dpi-proceedings.com/index.php/dtcse/article/download/14990/14503) -- cgit mrf-deployment