/* ---- Google Analytics Code Below */

Friday, February 08, 2019

Google Open Sources ClusterFuzz

Interesting example of automating certain kinds of testing,  always useful idea to automate repetitive operations that need to be complete.

Google Open Source Blog
The latest news from Google on open source releases, major projects, events, and student outreach programs. .... 

Open sourcing ClusterFuzz
Thursday, February 7, 2019

Fuzzing is an automated method for detecting bugs in software that works by feeding unexpected inputs to a target program. It is effective at finding memory corruption bugs, which often have serious security implications. Manually finding these issues is both difficult and time consuming, and bugs often slip through despite rigorous code review practices. For software projects written in an unsafe language such as C or C++, fuzzing is a crucial part of ensuring their security and stability.

In order for fuzzing to be truly effective, it must be continuous, done at scale, and integrated into the development process of a software project. To provide these features for Chrome, we wrote ClusterFuzz, a fuzzing infrastructure running on over 25,000 cores. Two years ago, we began offering ClusterFuzz as a free service to open source projects through OSS-Fuzz.

Today, we’re announcing that ClusterFuzz is now open source and available for anyone to use. .... " 

No comments: