Skip to content

Latest commit

 

History

History
156 lines (143 loc) · 10.6 KB

index.md

File metadata and controls

156 lines (143 loc) · 10.6 KB
Raw
title
Sydr

About

Sydr is a dynamic symbolic execution tool that explores new paths and enables error detection. Sydr uses DynamoRIO for concrete execution and Triton for symbolic execution.

Sydr-Fuzz is a dynamic analysis tool for security development lifecycle. It combines fuzzing (libFuzzer, AFL++) with the power of dynamic symbolic execution (Sydr). Sydr-Fuzz implements the following fuzzing pipeline:

  • Hybrid fuzzing with Sydr and libFuzzer/AFL++; coverage-guided Python (Atheris), Java (Jazzer) and JavaScript (Jazzer.js) fuzzing: sydr-fuzz run
  • Corpus minimization: sydr-fuzz cmin
  • Error detection (out of bounds, integer overflow, numeric truncation, division by zero, etc.) via symbolic security predicates: sydr-fuzz security
  • Collecting coverage: sydr-fuzz cov-html
  • Triaging, deduplication, and clustering of crashes and Undefined Behavior Sanitizer errors with Casr, and later upload of new and unique reports to DefectDojo: sydr-fuzz casr --ubsan --url <URL>

Our mission is discovering new bugs in open source projects via hybrid fuzzing (OSS-Sydr-Fuzz). We already found a significant number of trophies. Moreover, we compare Sydr-Fuzz with existing fuzzers.

Sydr-Fuzz supports multiple programming languages including C/C++ (libFuzzer/AFL++), Rust (cargo-fuzz/afl.rs), Go (go-fuzz), Python (Atheris), and Java (Jazzer). All languages except Python and Java support symbolic execution with Sydr.

Guides

  • C/C++: Fuzzing xlnt project with sydr-fuzz for fun and profit (libFuzzer) [english] [russian]
  • C/C++: Fuzzzing FreeImage project with Sydr and AFLplusplus [english] [russian]
  • Rust: Fuzzing goblin (Rust) project with Sydr and AFLplusplus [english] [russian]
  • Python: Fuzzing ruamel-yaml (Python) project with sydr-fuzz (Atheris backend) [english] [russian]
  • Go: Fuzzing golang/image (Go) project with sydr-fuzz (go-fuzz backend) [english] [russian]
  • Java: Fuzzing json‐sanitizer (Java) project with sydr‐fuzz (Jazzer backend) [english] [russian]
  • JavaScript: Fuzzing fast-xml-parser (JavaScript) project with sydr-fuzz (Jazzer.js backend) [english] [russian]
  • C#: Fuzzing YamlDotNet project with sydr‐fuzz (AFL and Sharpfuzz backend) [english] [russian]

Open Source Projects

Publications and Talks

  • Vishnyakov A., Fedotov A., Kuts D., Novikov A., Parygina D., Kobrin E., Logunova V., Belecky P., Kurmangaleev Sh. Sydr: Cutting Edge Dynamic Symbolic Execution. 2020 Ivannikov ISPRAS Open Conference. [paper] [slides] [video]
  • Fedotov A.N., Kurmangaleev Sh.F. CASR: core dump analysis and severity reporter tool. Proceedings of ISP RAS, 2020. [russian paper]
  • Kuts D. Towards Symbolic Pointers Reasoning in Dynamic Symbolic Execution. 2021 Ivannikov Memorial Workshop. [paper] [slides]
  • Vishnyakov A., Logunova V., Kobrin E., Kuts D., Parygina D., Fedotov A. Symbolic Security Predicates: Hunt Program Weaknesses. 2021 Ivannikov ISPRAS Open Conference. [paper] [slides] [russian video]
  • Savidov G., Fedotov A. Casr-Cluster: Crash Clustering for Linux Applications. 2021 Ivannikov ISPRAS Open Conference. [paper] [slides]
  • Kobrin E., Vishnyakov A., Fedotov A. Hybrid Fuzzing of TensorFlow Machine Learning Framework. MITSOBI 2022. [russian slides]
  • Vishnyakov A.V., Kobrin E.A., Fedotov A.N. Error detection in binary code with dynamic symbolic execution. Proceedings of ISP RAS, 2022. [russian paper] [russian slides]
  • Fedotov A. Sydr: Dynamic Analysis Technology. IVMEM 2022 Plenum. [russian slides] [russian video]
  • Fedotov A. Sydr: SDL for Artificial Intelligence. IVMEM 2022 Plenum. [russian slides] [russian video]
  • Parygina D., Vishnyakov A., Fedotov A. Strong Optimistic Solving for Dynamic Symbolic Execution. 2022 Ivannikov Memorial Workshop. [paper] [slides] [russian video]
  • Fedotov A. Sydr: Hybrid Fuzzing. IVMEM 2022 Cybersecurity Round Table. [russian slides]
  • Fedotov A. Sydr & CASR: Dynamic Analysis for SDL. ISPRAS Open 2022 Trusted Software Development. [russian slides]
  • Fedotov A. Development of Trusted Machine Learning Frameworks. ISPRAS Open 2022 Trusted AI. [russian slides] [russian video]
  • Vishnyakov A., Kuts D., Logunova V., Parygina D., Kobrin E., Savidov G., Fedotov A. Sydr-Fuzz: Continuous Hybrid Fuzzing and Dynamic Analysis for Security Development Lifecycle. 2022 Ivannikov ISPRAS Open Conference. [paper] [slides] [russian video]
  • Vishnyakov A. Error detection in binary code with dynamic symbolic execution. PhD thesis. [russian thesis] [russian synopsis] [russian slides]
  • Fedotov A., Vishnyakov A. CASR: Your Life Vest in a Sea of Crashes. OFFZONE 2023. [slides] [russian video]
  • Padaryan V., Stepanov V., Vishnyakov A. Fuzzing for SDL: Select, Cover, Reveal. OFFZONE 2023. [slides] [russian video]
  • Mezhuev T., Kobrin I., Vishnyakov A., Kuts D. Numeric Truncation Security Predicate. 2023 Ivannikov ISPRAS Open Conference. [paper] [slides] [russian video]
  • Yegorov I., Savidov G.: Crash Report Accumulation During Continuous Fuzzing with CASR. Ivannikov Memorial Workshop 2024, IEEE, 2024. [paper] [slides] [russian video]