F.P.W Library Sec [ CyberSecurity Book ]

SMART SPEAKER SHENANIGANS: MAKING THE SONOS ONE SING ITS SECRETS 📚 T.me/Library_Sec

📚 T.me/Library_Sec

#Fuzzing "L2Fuzz: Discovering Bluetooth L2CAP Vulnerabilities Using Stateful Fuzz Testing", 2022. Bluetooth is a wireless communication technology that al￾lows users to exchange various data in a short range, including Bluetooth Basic Rate/Enhanced Data Rate (BR/EDR) and Bluetooth Low Energy (BLE). Owing to their convenience, billions of devices have adopted Bluetooth technologies . ]-> A stateful fuzzer to detect vulnerabilities in Bluetooth BR/EDR LLC/L2CAP: https://github.com/haramel/l2fuzz 📚 @Library_Sec

#Sec_code_review "LibDB: An Effective and Efficient Framework for Detecting Third-Party Libraries in Binaries", 2022. Third-party libraries (TPLs) are important components of modern software systems. They are reused frequently during software de velopment . Open-source repository platforms and package management systems are the major sources of third-party libraries. However, security issues of the third-party code continue to arise. Vulnerabilities in well-known third-party libraries, such as the Heartbleed bug, could bring security threats to millions of devices. In addition, non-compliant reuse, which is a violation of legal software licenses, could lead to costly commercial disputes. Unfortunately, many developers do not pay sufficient attention to the code that is imported from third-party libraries. ]-> Datasets and source code: https://github.com/DeepSoftwareAnalytics/LibDB 📚 @Library_Sec