In its latest effort to aid developers in finding bugs in their software, Google has announced that its scalable fuzzing tool ClusterFuzz will now be open-source and available to all.
The search giant has been using the tool internally for some years now and it has allowed developers to find over 16,000 bugs in Chrome.
A few years ago, Google launched its OSS-Fuzz service which utilised ClusterFuzz, though it was only available to open-source projects.
Fuzzing is an automated method for detecting bugs in software that works by feeding large numbers of unexpected inputs to a target program. While the process may crash an application, fuzzing is quite effective at discovering memory corruption bugs that can often have serious security implications.
Fuzzing at scaleFor fuzzing to be truly effective though, it must be continuous, carried out at scale and integrated into a software project's development process. This is why Google created ClusterFuzz which is run on over 25,000 cores.
ClusterFuzz is able to provide end-to-end automation, from bug detection, to triage, to bug reporting and finally to closing bug reports automatically.
In addition to detecting bugs in Chrome, Google's tool has discovered 11,000 bugs in over 160 open-source source projects that utilised OSS-Fuzz.
Fuzzing has grown in popularity recently due to the fact that more and more software testing and deployment is automated.
ClusterFuzz is now available on Google's GitHub repository and the company has even provided detailed instructions for developers that wish to begin using its tool to integrate fuzzing into their workflows.
Via TechCrunch
We've also highlighted the best antivirus to protect your systems from the latest cyber threatsRead MoreDomain Holders Urged to Ensure Their Domains Are 2019-01-31 20:50:00
China, Russia Posing More Aligned Cyberattack Threats to 2019-01-31 17:24:00
ICANN Denies Reduction of Annual Fees for Struggling 2019-01-25 14:34:00
Volunteer-Based Project Succeeds in Taking Down 100,000 Malware 2019-01-24 15:47:01
An Investigation Shows How Bomb Threat Scammers Hijacked 2019-01-24 14:55:00
US Department of Homeland Security Issues Emergency Directive 2019-01-22 16:57:00
Biggest Fine Yet: French Watchdog Slaps Google With 2019-01-22 16:10:00
Government Shutdown Halts Trump’s FCC Deregulation Agenda, Says 2019-01-22 15:15:00
ICANN Gives .amazon Talks a March Deadline 2019-01-21 12:49:00
Google Is Installing 1.6 Million Solar Panels for 2019-01-18 17:38:00
2018 Cybersecurity Venture Capital Investment Reaches Record $5.3B, 2019-01-18 15:49:00
China Is Building a National-Level Cybersecurity Industrial Park 2019-01-18 15:24:00