Back To Schedule
Tuesday, October 27 • 12:00 - 12:50
ACRN Security: A Journey into Fuzzing and Hardening Edge Hypervisors - Mostafa Elsaid & Steffen Schulz, Intel

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
With the rise of data-centric IoT and Edge Compute, hypervisors have become a key component for real-time assurance, workload consolidation, and management. Unlike traditional cloud infrastructure, hypervisors at the Edge face an extended threat model with a broader set of threats and requirements (e.g. determinism, data privacy, etc..). As a result, ensuring the security and functional correctness of critical elements in the Trusted Computing Base (TCB) is crucial for the overall edge node security and dependability. Dynamic security validation methods like "Fuzzing" have been highly successful in uncovering novel bugs with runtime impact. However, as of now, there are no effective tools for covering the complex and diverse nature of components in the modern virtualization software stack. In this presentation, we discuss state-of-art fuzzing approaches that fit into the virtualized edge ecosystem. In addition, we share a set of Best Known Methods (BKMs) and techniques to execute a comprehensive fuzzing campaign for components scattered across different software layers; starting from the hypervisor, kernel service modules, and up to the Device Model (DM) in userspace.

avatar for Mostafa Elsaid

Mostafa Elsaid

Security Engineer, Intel
Mostafa Elsaid is a Security Engineer/Researcher at Intel Internet of Things Group (IOTG). His main interests are offensive system security and product's security architecture. Currently, he is a core contributor to the penetration testing and fuzzing activities for the ACRN opensource... Read More →

Steffen Schulz

Security Researcher, Intel
Steffen Schulz is a security researcher at Intel Labs Security and Privacy Research (SPR). His main interest is in foundational platform security and resilience features for emerging devices, such as IoT and accelerators. As part of the Intel Collaborative Research Institute for Collaborative... Read More →

Tuesday October 27, 2020 12:00 - 12:50 GMT
IoT Theater
  Internet of Things, Edge Computing Considerations