|
|
|
|
|
by f-
4248 days ago
|
|
The main problem with SAGE is that at least outside Microsoft, it exists just as a series of (very enthusiastic) papers :-) So, while I suspect it's very cool, it's also a bit of a no-op for everybody else. It's also impossible to independently evaluate the benefits: for example, its performance cost, the amount of fine-tuning and configuration required for each target, the relative gains compared to less sophisticated instrumented fuzzing strategies, etc. |
|