Re: Rien de nouveau

Quelques infos collectées autour de SAGE :

• http://lcamtuf.coredump.cx/afl/historical_notes.txt paragraphe Influences "In short, afl-fuzz is inspired chiefly by the work done by Tavis Ormandy back in 2007. (...) A few years later, Gabriel Campana released fuzzgrind, a tool that relied purely on Valgrind and a constraint solver to maximize coverage without any brute-force bits; and Microsoft Research folks talked extensively about their still non-public, solver-based SAGE framework."
• http://www.dwheeler.com/blog/2015/04/07/ "Heartbleed found with american fuzzy lop (afl) and Address Sanitizer (ASan)" : "Simple dumb random fuzzers can only perform relatively shallow tests; getting any depth has required more complex approaches such as detailed descriptions of the required format (the approach used by so-called "smart" fuzzers) and/or white-box constraint solving (such as fuzzgrind or Microsoft’s SAGE)"
• Poster sur SAGE http://research.microsoft.com/en-us/um/people/pg/public_psfiles/SAGE-in-1slide-for-PLDI2013.pdf
• Article scientifique sur SAGE http://research.microsoft.com/en-us/um/people/pg/public_psfiles/cacm2012.pdf
• Pour le reste, ce commentaire « The main problem with SAGE is that at least outside Microsoft, it exists just as a series of (very enthusiastic) papers :-) » me semble adéquat.