Security

Distinguished Lecture Series talk by Thorsten Holtz (Ruhr University Bochum)

Written on 09.01.2020 13:45 by Giancarlo Pellegrino

As part of CISPA’s Distinguished Lecture Series, on Fri, January 10, at 11:00am s.t. in CISPA’s lecture hall, we are pleased to announce that Thorsten Holz (Ruhr University Bochum) will give a talk on: Fuzzing Hypervisors and Complex Interpreters

Participation is optional and will not influence your exercise points or grade. Please join if you are interested in the topic.

Title: Fuzzing Hypervisors and Complex Interpreters

When: Fri, January 10, at 11:00am s.t.

Where: CISPA’s lecture hall

Abstract: In recent years, randomized fuzz-testing (“fuzzing”) has progressed rapidly, mainly driven by tools such as afl and lots of academic work on this topic. In practice, fuzzing is often superior to seemingly "smarter" approaches such as symbolic or concolic execution. We provide an overview of our recent results, including fuzzing hypervisors, grammar-based fuzzing of complex interpreters, and fuzz-testing of stateful systems. In total, the different methods enabled us to find hundreds of software bugs that lead to more than 100 CVEs.

Bio: Thorsten Holz is full professor in the Horst Görtz Institute for IT Security at Ruhr-University Bochum. His research focuses on system security. He obtained his PhD in computer science from the University of Mannheim. He received the DFG Heinz Mai­er-Leib­nitz-Price in 2011 and an ERC Star­ting Grant in 2014. He is one of the three spokespersons of the CASA (Cyber Security in the Age of Large-Scale Adversaries) BMBF Cluster of Excellence in Bochum.

/edit: highlighted that participation is optional