EkoParty 2021: Practical steps for fuzz testing embedded software in a CI pipeline

November 21, 2021

Cybersecurity is becoming an integral part of the automotive industry. To this end, automotive organizations are performing various cybersecurity activities in the development process. One such activity that can help detect unknown vulnerabilities in the product is fuzz testing. Performing fuzz testing as an automated step allows for more effectively detecting potential vulnerabilities earlier in the development process.
This presentation outlines a practical step-by-step guide to building fuzz testing into the continuous integration (CI) pipeline using the Zephyr Project RTOS as an example.
Key topics and takeaways:
* Identifying the target communication protocols to fuzz
* Defining fuzz testing strategies
* Executing fuzz testing on a continuous basis