Addison Crump

In 2024, I attended ICST in Toronto.

This one's a reminder for me: if you aren't sure...

It has now been several years since I've taught my own classes, or even acted as a tutor.

Times have changed since we were last here.

I care quite deeply about scientific communication.

I've updated my website a bit.

This semester marks four years since I stopped teaching high school classes.

I am not fond of this recent genenerative AI movement.

I'm having a hard time right now.

I often suffer from world-weariness.

Recording.

I'm working on building new benchmarking tools for fuzzing.

I have come to realise---or rather, I have become more and more convinced that---fuzzing research has stalled not because we have no further contributions to make, but because the contributions that we are making are either incremental and merely sound im…

Most of my comments here are US-centric, but apply to other countries I've grown up in, too.

Previously [1, 2, 3], I've talked about the effects of what I call the "reinterpretation problem".

Recently, I was made aware of a paper in which I was acknowledged.

This was a presentation offered at the Search-Based and Fuzz Testing Workshop in 2025.

Publication is available via the IEEE publication.

Video is not available as the presentation was provided privately.

Publication is provided on the conference website.

This page comes about because of two things: an assignment for my computer graphics course, and a bit of inspiration from a computer graphics YouTuber, acerola, who recently did some work with fractal motion.

In the past year, we've had a few discussions in my research group about joining various competitions, such as AIxCC, Pwn2Own, and others.

I was recently invited to speak at an automotive cybersecurity conference by Vector, a development group for cyberphysical systems1.

Communication in testing topics is hard.

I've been thinking a lot recently about what it means to do research in fuzzing.

A two-part blog series posted on secret.club.

Video is available on YouTube.

Publication is provided on the primary author's website.

This was a presentation offered at the Search-Based and Fuzz Testing Workshop and at the Artificial Intelligence in Software Testing in 2024.

Talk is available online on YouTube.

Recording.

This section contains recordings, slides, or other information regarding talks and presentations I've given.

You may find each of the papers in this section on my ORCID page. 2025 SBFT’25 Competition Report — Fuzzing Track TWINFUZZ: Differential Testing of Video Hardware Acceleration Stacks 2024 SoK: Prudent Evaluation Practices for Fuzzing 2023 CrabSandwich: Fu…

This section contains miscellaneous publications, such as blog posts on other sites or projects that sit on some git or another somewhere. 2024 Ring Around The Regex: Lessons learned from fuzzing regex libraries 2022 Differential Fuzzing of the Solana BPF…

Developers of software or designs under test in a security research context must be informed of all vulnerabilities discovered during that research within 90 days of discovery, with no exceptions.

Available with paywall online from ACM.

I only really use laptops, and I use several throughout my various tasks.

This was a presentation offered during SBFT'23 to describe the LibAFL team's submissions to the fuzzing tool competition.

Available with paywall online from IEEE.

Available with paywall online from IEEE.

Available online for free from USENIX.

A two-part blog series posted on secret.club under the title: "Earn $200K by fuzzing for a weekend".

Available with paywall online from IEEE.

This was a project I did during my undergrad when I was still learning about where I wanted to go with my security research.