{"id":102283,"date":"2021-11-14T15:36:53","date_gmt":"2021-11-14T13:36:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite"},"modified":"2021-11-14T15:36:53","modified_gmt":"2021-11-14T13:36:53","slug":"google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","title":{"rendered":"Google esitles fuzzing-testeerimise s\u00fcsteemi ClusterFuzzLite","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google esitles oma ClusterFuzzLite projekti, mis v\u00f5imaldab organiseerida koodi fuzzing-teste, et varakult tuvastada potentsiaalseid haavatavusi pideva integreerimise s\u00fcsteemides. Praegu saab ClusterFuzzi kasutada GitHub Actions, Google Cloud Build ja Prow pull-p\u00e4ringute fuzzing-teste automatiseerimiseks, kuid tulevikus oodatakse ka teiste CI-s\u00fcsteemide toe lisandumist. Projekt p\u00f5hineb ClusterFuzzi platvormil, mis on loodud fuzzing-teste juhtivate klastrite koordineerimiseks, ning jagatakse Apache 2.0 litsentsi alusel. <\/p>\n

V\u00e4\u00e4rib m\u00e4rkimist, et p\u00e4rast Google'i OSS-Fuzzi teenuse k\u00e4ivitamist 2016. aastal on alla v\u00f5etud \u00fcle 500 olulise avatud projekti pideva fuzzing-testeerimise programmi. Tehtud kontrollide p\u00f5hjal on k\u00f5rvaldatud \u00fcle 6500 kinnitatud haavatavuse ja parandatud \u00fcle 21 000 vea. ClusterFuzzLite j\u00e4tkab fuzzing-testeerimise mehhanismide arendamist, v\u00f5imaldades probleemide varasema avastamise muudatuste \u00fclevaatamise etapis. ClusterFuzzLite on juba rakendatud muutuste \u00fclevaatamise protsessides projektides systemd ja curl, aidates tuvastada vigu, mida ei m\u00e4rganud staatilised anal\u00fcsaatorid ja linterd, mis rakendati uue koodi algfaasis. <\/p>\n

ClusterFuzzLite toetab projektide testimist keeltes C, C++, Java (ja muudes JVM-p\u00f5histes keeltes), Go, Python, Rust ja Swift. Fuzzing-testeerimine toimub LibFuzzer'i mootori abil. M\u00e4lu ja anomaaliate probleemide avastamiseks v\u00f5ivad samuti kutsuda t\u00f6\u00f6riistu AddressSanitizer, MemorySanitizer ja UBSan (UndefinedBehaviorSanitizer). <\/p>\n

ClusterFuzzLite peamised omadused: kiire muudatuste kontrollimine, et tuvastada vigu enne koodi aktsepteerimist; crash'ide ilmumise tingimuste raportite laadimine; v\u00f5imalus liikuda s\u00fcvafuzzing-testimise juurde, et tuvastada s\u00fcgavamad vead, mis ei paistnud v\u00e4lja p\u00e4rast koodi muutmise kontrollimist; katvuse raportite genereerimine, et hinnata katvust testimisel; modulaarne arhitektuur, mis v\u00f5imaldab valida vajalikku funktsionaalsust. <\/p>\n

Kordame, et fuzzing-testimisel genereeritakse voog igasugustest juhuslikest sisendandmete kombinatsioonidest, mis on l\u00e4hedased tegelikele andmetele (n\u00e4iteks HTML-lehed juhuslike siltide parameetritena, arhiveerimise v\u00f5i piltide anomaalsete pealkirjadega jne) ning tuvastatakse v\u00f5imalikud t\u00f5rked nende t\u00f6\u00f6tlemise k\u00e4igus. Kui m\u00f5ni j\u00e4rjestus viib crash'ini v\u00f5i ei vasta oodatud reaktsioonile, siis t\u00f5en\u00e4oliselt n\u00e4itab see vea v\u00f5i haavatavuse olemasolu.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 ClusterFuzzLite, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u043d\u043d\u0435\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f ClusterFuzz \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f pull-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 GitHub Actions, \u0432 Google Cloud Build \u0438 \u0432 Prow, \u043d\u043e \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 CI-\u0441\u0438\u0441\u0442\u0435\u043c. \u041f\u0440\u043e\u0435\u043a\u0442 \u0431\u0430\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 ClusterFuzz, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102283","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google esitles fuzzing-testimise s\u00fcsteemi ClusterFuzzLite | ProHoster","description":"Google esitles projekti ClusterFuzzLite, mis v\u00f5imaldab korraldada koodi fuzzing-testimist potentsiaalsete haavatavuste varaseks tuvastamiseks pideva integratsiooni s\u00fcsteemide k\u00e4itusperioodil. Praegu saab ClusterFuzzi kasutada pull-requestide fuzzing-testimise automatiseerimiseks GitHub Actions, Google Cloud Build ja Prow platvormidel, kuid tulevikus oodatakse ka toetust teistele CI-s\u00fcsteemidele. Projekt p\u00f5hineb ClusterFuzzi platvormil, mille on loonud","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClusterFuzzLite | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 ClusterFuzzLite, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u043d\u043d\u0435\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f ClusterFuzz \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f pull-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 GitHub Actions, \u0432 Google Cloud Build \u0438 \u0432 Prow, \u043d\u043e \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 CI-\u0441\u0438\u0441\u0442\u0435\u043c. \u041f\u0440\u043e\u0435\u043a\u0442 \u0431\u0430\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 ClusterFuzz, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-14T13:36:53+00:00","article:modified_time":"2021-11-14T13:36:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102283","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-14 13:38:15","updated":"2022-10-05 12:38:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102283"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102283\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}