Taint Driven Crash Triage

The past several years has seen rapid advancement in automating software testing through fuzzing techniques and symbolic execution engines. Automated test generation tools produce data that require root cause analysis which is still primarily a manual effort requiring technical reverse engineering and debugging expertise.

This talk will show how dynamic dataflow analysis can be applied to greatly reduce the time required to triage crashes and determine the root cause. The author will demonstrate the taint driven triage approach using the opensource moflow tools created by Cisco Talos and compare the capabilities to other opensource and commercial offerings available today.

Location: Jade Ballroom B Date: November 2, 2018 Time: 3:00 pm - 4:00 pm Richard Johnson