{"id":14178,"date":"2019-02-07T19:51:42","date_gmt":"2019-02-07T19:51:42","guid":{"rendered":"https:\/\/rsoftsolution.com\/blog\/google-open-sources-clusterfuzz.html"},"modified":"2019-02-07T19:51:42","modified_gmt":"2019-02-07T19:51:42","slug":"google-open-sources-clusterfuzz","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-open-sources-clusterfuzz.html","title":{"rendered":"Google open sources ClusterFuzz"},"content":{"rendered":"

Google <\/a> today announced<\/a> that it is open sourcing ClusterFuzz<\/a>, a scalable fuzzing tool that can run on clusters with more than 25,000 machines.<\/p>\n

The company has long used the tool internally, and if you\u2019ve paid particular attention to Google\u2019s fuzzing efforts (and you have, right?), then this may all seem a bit familiar. That\u2019s because Google launched the OSS-Fuzz<\/a> service a couple of years ago and that service actually used ClusterFuzz. OSS-Fuzz was only available to open-source projects, though, while ClusterFuzz is now available for anyone to use.<\/p>\n

The overall concept behind fuzzing<\/a> is pretty straightforward: you basically throw lots of data (including random inputs) at your application and see how it reacts. Often, it\u2019ll crash, but sometimes you\u2019ll be able to find memory leaks and security flaws. Once you start anything at scale, though, it becomes more complicated and you\u2019ll need tools like ClusterFuzz to manage that complexity.<\/p>\n

\"\"<\/p>\n

ClusterFuzz automates the fuzzing process all the way from bug detection to reporting \u2014 and then retesting the fix. The tool itself also uses open-source libraries like the libFuzzer<\/a>\u00a0fuzzing engine and the AFL fuzzer<\/a>\u00a0to power some of the core fuzzing features that generate the test cases for the tool.<\/p>\n

Google says it has used the tool to find more than 16,000 bugs<\/a> in Chrome and 11,000 bugs in more than\u00a0 160 open-source projects that used OSS-Fuzz. Since so much of the software testing and deployment toolchain is now generally automated, it\u2019s no surprise that fuzzing is also becoming a hot topic these days (I\u2019ve seen references to \u201ccontinuous fuzzing\u201d pop up quite a bit recently).<\/p>\n

Article source: http:\/\/feedproxy.google.com\/~r\/techcrunchIt\/~3\/BNXgi8isl-4\/<\/p>","protected":false},"excerpt":{"rendered":"

Google today announced that it is open sourcing ClusterFuzz, a scalable fuzzing tool that can run on clusters with more than 25,000 machines. The company has long used the tool <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[19],"tags":[25],"class_list":["post-14178","post","type-post","status-publish","format-standard","hentry","category-enterprise-software","tag-enterprise"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t