Dec 8 - Unit testing, fuzzing cars

Location: Building 2 - Monterey/Half-moon Bay

Please join us on Dec. 8 for our group's introductory meeting.

Agenda

• 6:30 pm - Dinner & mingling

• 7:00 pm - Lightning talks

• 7:30 pm - Fuzzing as unit testing by Otto Ebeling (Facebook) and Adrian Spanu (Facebook)

Fuzz testing is usually considered separately from other testing methodologies such as unit or integration testing. In stark contrast to a unit testing framework like GTEST, a traditional fuzzer treats its target program as if it were a black box: a file fuzzer writes the input to a file and asks the OS to start up a new process, which then reads the file and finally parses it. This approach entails multiple user-kernel transitions and unnecessary data copying.

Taking some lessons from the unit testing playbook, we can cut out the middlemen and interface directly with high-risk parser code. This talk discusses our design choices and experiences with the described approach at Facebook.

• 8:00 pm - Fuzzing your car's speedometer by Aviram Jenik (Beyond Security)
A live demonstration of CAN BUS fuzzing: a short guide to fuzzing the standard interface between modern cars and peripheral equipment such as speedometers, HUDs and diagnostics tools with the assistance of standard equipment that can be bought on Ebay for less than a full tank of gas. No cars will be harmed during the demonstrations, but some speedometers may be...

• 8:35 pm - Q&A

• 8:45 pm - End