Interface in general: where do you connect your fuzzing pipe? How do you detect a wrong behavior? Also, feedback gathering can be problematic in some cases. For example, I don't think anyone is effectively fuzzing web apps? (which is like 70% of the code nowadays, I think?)
I talked about some open challenges in fuzzing in a 2016 presentation recapping the CGC:https://blog.trailofbits.com/2017/02/16/the-smart-fuzzer-revolution/ …
-
This Tweet is unavailable.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.