When Virtualization Encounters AFL - A Portable Virtual Device Fuzzing Framework with AFL

Explore a portable virtual device fuzzing framework that combines virtualization technology with American Fuzzy Lop (AFL) in this 28-minute Black Hat conference talk. Delve into the critical issue of virtual machine escape attacks, focusing on the vulnerabilities of virtual devices as a significant attack surface. Learn about the framework's approach to addressing the security challenges posed by virtual device emulation at the host level and arbitrary data access from guests. Examine real-world examples of virtual machine escape attacks, including the VENOM attack, to understand the importance of robust security measures in virtualized environments. Gain insights from speakers Jack Tang and Moony Li on how this framework can enhance the security of virtualized systems and mitigate potential escape vulnerabilities.