How fuzzing helps to find bugs

Presentation name: How fuzzing helps to find bugs
Speaker: Zbigniew Jędrzejewski-Szmek
Description: This is based on my experience with fuzzing in systemd and casync using google's oss-fuzz. I'll discuss the general idea, libraries which can be used for fuzzing (afl, libfuzzer) and testing (address sanitizer, valgrind, ...), how to easily add fuzzing to any compiled project, and how to use online fuzzing resources. I think that almost any project can benefit, but this is still relatively unknown and many people don't realize how is it easy to add fuzzing, and how quickly this finds bugs. Fuzzing is yet another tool that is a necessary part of the toolbox.

I expect that attendees will be know how to add fuzzing to their projects after the session even if they knew nothing about the subject beforehand.