# Fuzzing and Dynamic Analysis for High-Integrity Software with Paul Butcher

- Show: [The Pragmatic Embedded Podcast](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast)
- Published: 2026-05-13
- Length: 48m
- Page: https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher
- Listen: https://agileembeddedpodcast.com/episodes/fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher-4tTFy6no

## Summary

Paul Butcher, Unit Director of Dynamic Analysis at AdaCore, explains how dynamic analysis techniques like fuzzing find corner-case bugs that traditional unit testing misses in high-integrity software. He details the mechanics of fuzzing, including mutation engines and anomaly detection, and discusses challenges with timing and concurrency in embedded systems, citing success with the NH90 avionics MIL bus. Butcher also describes combining static analysis with targeted fuzzing to automatically triage false positives and generate reproducers, while touching on formal verification using SPARK for the London Underground's Victoria line and the cautious role of LLMs in verification workflows.

## Chapters

- [0:00](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher#t=0) Introduction: Paul Butcher and AdaCore's Dynamic Analysis Division
- [1:56](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher#t=116) Defining Dynamic Analysis: Executing Code vs. Static Review
- [4:38](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher#t=278) Fuzzing Mechanics: Mutation Engines, Anomaly Detection, and Bug Finding
- [10:18](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher#t=618) Challenges in Embedded Fuzzing: Timing, Concurrency, and the NH90 Case Study
- [18:10](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher#t=1090) Safety Standards: DO-178C, Objective-Based Compliance, and Assurance Levels
- [24:50](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher#t=1490) Combining Static and Dynamic Analysis: Triaging False Positives and Generating Reproduciers
- [39:29](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher#t=2369) Formal Verification in Practice: SPARK and the London Underground's Victoria Line
- [42:33](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher#t=2553) LLMs in Verification: Cautious Adoption for Report Analysis vs. Core Determinism

## Topics

- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [AI & machine learning](https://hardwarepodcasts.com/topic/ai-and-machine-learning)
- [Certification & compliance](https://hardwarepodcasts.com/topic/certification-and-compliance)
- [Microcontrollers & dev platforms](https://hardwarepodcasts.com/topic/microcontrollers-and-platforms)

## Most relevant to

early-stage companies

## Mentioned

- AdaCore (company)
- Eurofighter (product)
- NH90 (product)
- SPARK (tool)
- London Underground (company)
- Victoria line (product)
- DO-178C (other)
- Foundation DB (product)
- AFL (tool)

## Related episodes from other shows

- [Software Verificationpalooza](https://hardwarepodcasts.com/podcast/oxide-and-friends/2023-06-20-software-verificationpalooza) (Oxide and Friends)
- [158: Programming Is Too Difficult for Humans](https://hardwarepodcasts.com/podcast/embedded-fm/2016-06-28-158-programming-is-too-difficult-for-humans) (Embedded.fm)
- [290: Rule of Thumbs](https://hardwarepodcasts.com/podcast/embedded-fm/2019-06-06-290-rule-of-thumbs) (Embedded.fm)
- [183: Robots Having Nervous Breakdowns](https://hardwarepodcasts.com/podcast/embedded-fm/2017-01-11-183-robots-having-nervous-breakdowns) (Embedded.fm)
- [270: Broccoli Is Good Too](https://hardwarepodcasts.com/podcast/embedded-fm/2018-12-14-270-broccoli-is-good-too) (Embedded.fm)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2026-05-13-fuzzing-and-dynamic-analysis-for-high-integrity-software-with-paul-butcher. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to The Pragmatic Embedded Podcast.