Building Hardened IoT Implementations With LangSec | Prashant Anantharaman | nullcon Goa 2019

This talk presents an overview of language-theoretic security, emphasizing the importance of recognizing input before processing to prevent vulnerabilities. The speaker discusses the parser combinator library Hammer and demonstrates how to build applications using this approach. Additionally, the session explores generating test cases from parser combinator inputs that represent regular expressions and context-free grammars to ensure implementation correctness. The talk concludes with a practical demonstration of applying these techniques to the AMQP protocol, showcasing their effectiveness against modern fuzzers such as AFL and libfuzzer. Prashant Anantharaman, a Ph.D. student at Dartmouth College, shares insights from his research in language-theoretic security, applied cryptography, and IoT security.