Back to Portfolio

Security Research Blog

Insights and discoveries from the world of cybersecurity, fuzzing, blockchain security, and vulnerability research. Sharing knowledge from years of security engineering experience.

August 9, 20243 min read

Rust Arbitrary Trait

Understanding and implementing the Arbitrary trait in Rust for property-based testing and fuzzing applications.

Read full article
December 27, 20195 min read

Custom Proto Mutation

Exploring custom protocol buffer mutation strategies for more effective fuzzing of protocol-based applications.

Read full article
May 17, 20194 min read

mruby Proto Fuzzer

Development of a protocol buffer-based fuzzer for mruby using structure-aware fuzzing techniques.

Read full article
January 18, 201910 min read

Deconstructing LPM

Analysis of libprotobuf-mutator (LPM) and its application in structure-aware fuzzing for protocol buffer formats.

Read full article
December 5, 20181 min read

Fuzzing mruby

Techniques and experiences fuzzing mruby, the lightweight Ruby implementation, including harness development.

Read full article
November 12, 20182 min read

Differential ECC Fuzzing

Exploring differential fuzzing techniques for elliptic curve cryptography implementations to find implementation bugs.

Read full article
October 29, 20185 min read

Building For OSSFuzz

Guide to preparing and integrating open-source projects with Google's OSS-Fuzz continuous fuzzing platform.

Read full article
October 28, 20184 min read

Summary Of SPPapers

Summary and analysis of significant security and privacy papers, highlighting key research developments in the field.

Read full article
October 20, 201811 min read

Fuzzing Solidity Compiler

Deep dive into fuzzing techniques for the Solidity compiler, exploring automated testing methods for smart contract compilation.

Read full article
October 8, 20189 min read

Good-Turing Fuzzing

Applying Good-Turing frequency estimation to fuzzing for better input generation and coverage optimization.

Read full article
September 21, 20182 min read

OSS-Fuzz tcpdump

Experience and insights from integrating tcpdump into Google's OSS-Fuzz continuous fuzzing platform.

Read full article
September 21, 20186 min read

libFuzzer vs AFL-fuzz

Comparative analysis of libFuzzer and AFL-fuzz, two popular fuzzing frameworks, examining their strengths and use cases.

Read full article
March 22, 20182 min read

Music Theory

An exploration of music theory concepts and their mathematical foundations, bridging the gap between art and science.

Read full article
August 4, 201713 min read

Exploring Fuzzer Crashes

Deep dive into analyzing and understanding crashes discovered through fuzzing, including crash triage and root cause analysis.

Read full article
August 3, 20176 min read

Inferring Program Input Format

Techniques for automatically inferring and understanding the input format requirements of programs for more effective testing.

Read full article
July 24, 20176 min read

Fuzzing OpenvSwitch

Exploring fuzzing techniques for OpenvSwitch, a production-grade multilayer virtual switch designed to enable massive network automation.

Read full article