4 ms·
This is generally through the use of (often custom) analyzers. I would wager, though I have little empirical evidence, that most non-trivial zero days of large
by junon 5y ago
This is generally through the use of (often custom) analyzers. I would wager, though I have little empirical evidence, that most non-trivial zero days of large software like this are not strictly manually discovered.
- skrebbel 5y agoIsn't this a bit like saying most software these days isn't manually built, because they use compilers?
- junon 5y agoNot at all.
- smolder 5y agoNot sure the point of this comparison. Using compilers to build software has been all but required for a long time, and exploit discovery can be done just by using the software in unexpected ways, or by using complex reverse engineering and analysis tools.
- Tutanota1 5y agoits more like you run a fuzzer and hope it breaks something.