Fuzzing Linux with Xen - Advanced Techniques and Findings

Explore the intricacies of fuzzing Linux using Xen in this 27-minute conference talk by Tamas K Lengyel from Intel. Delve into feedback fuzzers, Xen VM forking techniques, and the speed advantages of VM forking. Learn about Xen VMI and its application in fuzzing. Discover advanced triaging methods and gain insights into USB3 xHCI architecture. Analyze real-world examples of bug detection and understand the challenges in full-VM taint analysis. Examine the findings, fixes, and ongoing issues in Linux fuzzing, including the use of dmamonitor. Gain valuable knowledge on enhancing Linux security through advanced fuzzing techniques.

Intro
Feedback fuzzers
Xen VM forking
VM forking speed
Xen VMI
Fuzzing on Xen
There is more to fuzzing
USB3 xHCI architecture overview
Advanced triaging
Can you spot the bug?
What can go wrong here?
What we found & fixed
Mission accomplished!!
dmamonitor
still some problems
Full-vm taint analysis