PkgFuzz Project: A New Continuous Fuzzing for Open Source Software
summary
PkgFuzz Project presents a new continuous fuzzing system for open-source software that targets package ecosystems. It describes an approach to continuously run automated fuzzers across packages (likely integrating with build and package metadata) to find and report security bugs in OSS supply chains using open tooling and infrastructure.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 4:42Fuzzing basics and history
- 8:55Automation challenges
- 12:09PkgFuzz project idea
- 14:19Package analysis
- 16:26Fuzzing and crash handling
- 19:01Large-scale fuzzing
- 21:54Results analysis
- 27:34Exploitability verification
- 32:52Vulnerability reporting
- 33:56Future challenges
- 37:56Summary
related talks
31m“Fuzz or lose..."
39mMaking Fuzzing Part of Your Software Development Lifecycle
01h 39mFuzzing in the open: Integrate your project in OSS-Fuzz for continuous fuzzing
23mContinuous Fuzzing Best Practices
44mOSS-Fuzz - Google's continuous fuzzing service for open source software
39mFuzzing Session: Finding Bugs and Vulnerabilities Automatically
01h 00mClusterFuzz: Fuzzing at Google Scale
52mIntroducing Microsoft’s New Open Source Fuzzing Platform