Fuzzing Against the Machine: Automate vulnerability research with emulated IoT devices on QEMU
Language: English
Published by Packt Publishing, 2023
- Softcover
- New
Seller: GreatBookPricesUK, Woodford Green, United KingdomGreatBookPricesUK
AbeBooks seller since January 28, 2020
Condition: New
£ 44.64
Quantity: Over 20 available
Add to basketSeller Inventory # 45834811-n
- Title
- Fuzzing Against the Machine: Automate vulnerability research with emulated IoT devices on QEMU
- Author
- Antonio Nappa; Eduardo Blazquez; Nikias Bassen; Dr. Javier Lopez-Gomez
- Publisher
- Packt Publishing
- Publication year
- 2023
- Condition
- New
- Binding
- Soft cover
- Language
- English
- ISBN 10
- 1804614971
- ISBN 13
- 9781804614976
Find security flaws in any architecture effectively through emulation and fuzzing with QEMU and AFL
Purchase of the print or Kindle book includes a free PDF eBook
Key Features
- Understand the vulnerability landscape and useful tools such as QEMU and AFL
- Explore use cases to find vulnerabilities and execute unknown firmware
- Create your own firmware emulation and fuzzing environment to discover vulnerabilities
Book Description
Emulation and fuzzing are among the many techniques that can be used to improve cybersecurity; however, utilizing these efficiently can be tricky. Fuzzing Against the Machine is your hands-on guide to understanding how these powerful tools and techniques work. Using a variety of real-world use cases and practical examples, this book helps you grasp the fundamental concepts of fuzzing and emulation along with advanced vulnerability research, providing you with the tools and skills needed to find security flaws in your software.
The book begins by introducing you to two open source fuzzer engines: QEMU, which allows you to run software for whatever architecture you can think of, and American fuzzy lop (AFL) and its improved version AFL++. You’ll learn to combine these powerful tools to create your own emulation and fuzzing environment and then use it to discover vulnerabilities in various systems, such as iOS, Android, and Samsung's Mobile Baseband software, Shannon. After reading the introductions and setting up your environment, you’ll be able to dive into whichever chapter you want, although the topics gradually become more advanced as the book progresses.
By the end of this book, you’ll have gained the skills, knowledge, and practice required to find flaws in any firmware by emulating and fuzzing it with QEMU and several fuzzing engines.
What you will learn
- Understand the difference between emulation and virtualization
- Discover the importance of emulation and fuzzing in cybersecurity
- Get to grips with fuzzing an entire operating system
- Discover how to inject a fuzzer into proprietary firmware
- Know the difference between static and dynamic fuzzing
- Look into combining QEMU with AFL and AFL++
- Explore Fuzz peripherals such as modems
- Find out how to identify vulnerabilities in OpenWrt
Who this book is for
This book is for security researchers, security professionals, embedded firmware engineers, and embedded software professionals. Learners interested in emulation, as well as software engineers interested in vulnerability research and exploitation, software testing, and embedded software development will also find it useful. The book assumes basic knowledge of programming (C and Python); operating systems (Linux and macOS); and the use of Linux shell, compilation, and debugging.
Table of Contents
- Who this book is for
- History of emulation
- Qemu from the ground
- Qemu Execution Modes and Fuzzing
- A Famous Refrain: AFL+QEMU = CVEs
- Modifying QEMU for basic instrumentation
- Real-life Case Study: Samsung Exynos Baseband
- Case Study: OpenWRT full system fuzzing
- Case Study: OpenWRT System Fuzzing for ARM
- Finally Here: iOS Full System Fuzzing
- Deus Ex Machina: Fuzzing Android Libraries
- Conclusion and Final Remarks
"Synopsis" may belong to another edition of this title.
About the Author
Antonio Nappa is an Application Analysis Team Leader at Zimperium Inc. He has been in the cybersecurity game since 17 years old. He holds a PhD in Software and Systems from the Madrid Institute of Advanced Studies. He has been a visiting scholar at UC Berkeley. His contributions have been published and recognized in international peer-reviewed venues. Since the DEFCON 2008 Finals, he never goes to sleep with a segfault.
Eduardo Blázquez is a PhD student of the University Carlos III of Madrid. He has been working in the cybersecurity area since 2017, with interests in Reverse Engineering and Malware Analysis. Currently, he is doing a PhD thesis about Android Security, but in his spare time he likes to study different topics like program analysis or operating system internals, and from time to time he likes to play different wargames about software exploitation.
"About the title" may belong to another edition of this title.
GreatBookPricesUK
Woodford Green, United Kingdom
AbeBooks seller since January 28, 2020
Shipping rates from United Kingdom to U.S.A.
| Item | 10 to 27 business days | 10 to 30 business days |
|---|---|---|
| First item | £ 15.00 | £ 15.00 |
Payment methods
Store description
GreatBookPrices.com is your top source for finding new books at the absolute lowest prices, guaranteed ! We offer big discounts - everyday - on millions of titles in virtually any category, from Architecture to Zoology -- and everything in between. Discover great deals and super-savings, on professional books, text book titles, the newest computer guides, or your favorite fiction authors. You'll find it all - at HUGE SAVINGS - at GreatBookPrices. Browse through our complete online product catalog today. Serving customers around the world for years, we help thousands find just the books they're looking for -- at incredibly low, bargain prices.…
Specialty
TradeBooksSeller's business information
Far Corner Europe Limited
19-20 Bourne Court, 19-20 Bourne Court
Woodford Green, United Kingdom IG8 8HD
Terms of sale
Company Name: GreatBookPricesUK
Legal Entity: Far Corner Europe Limited
Address: 19-20 Bourne Court, Southend Road, Woodford Green Essex, UK IG8 8HD
Registration #: 10691061, VAT GB307932304
Authorized representative: Danielle Hainsey
Right of withdrawal
If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.
Information regarding the right of withdrawal
Statutory right to withdraw
You have the right to withdraw from this contract within 14 days without giving any reason.
The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.
To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).
We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.
We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.
We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.
We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.
You shall send back the goods or hand them over to GreatBookPricesUK, Castle Donington, Derby, United Kingdom, without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Exceptions to the right of withdrawal
The right of withdrawal does not apply to:
- The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
- The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.
Shipping terms
Our warehouses across the globe are fully operational without substantial delays. We are working hard and continue to overcome the daily challenges presented by COVID-19. There have been reports that delivery carriers are experiencing large delays resulting in longer than normal deliveries to customers. We would like to apologize in advance if your item arrives later than the expected delivery due date.
Internal processing of your order will take about 1-2 business days. Please allow an additional 4-14 business days for Royal Mail delivery.