{"id":102283,"date":"2021-11-14T15:36:53","date_gmt":"2021-11-14T13:36:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite"},"modified":"2021-11-14T15:36:53","modified_gmt":"2021-11-14T13:36:53","slug":"google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","title":{"rendered":"Google je predstavil sistem fuzzing-testiranja ClusterFuzzLite.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Podjetje Google je predstavilo projekt ClusterFuzzLite, ki omogo\u010da organizacijo fuzzing-testiranja kode za zgodnje odkrivanje potencialnih ranljivosti v fazi delovanja sistemov neprekinjene integracije. Trenutno se lahko ClusterFuzz uporablja za avtomatizacijo fuzzing-testiranja pull-pro\u0161enj v GitHub Actions, Google Cloud Build in Prow, v prihodnje pa pri\u010dakujemo podporo tudi za druge CI-sisteme. Projekt temelji na platformi ClusterFuzz, ki je bila ustvarjena za koordinacijo delovanja klastrskih fuzzing-testov, in je licencirana pod Apache 2.0. <\/p>\n

Opozarja se, da je po uvedbi storitve OSS-Fuzz podjetja Google leta 2016 v program neprekinjenega fuzzing-testiranja bilo sprejetih ve\u010d kot 500 pomembnih odprtih projektov. Na podlagi opravljenih pregledov je bilo odpravljeno ve\u010d kot 6500 potrjenih ranljivosti in ve\u010d kot 21 tiso\u010d napak. ClusterFuzzLite nadaljuje razvoj mehanizmov fuzzing-testiranja z mo\u017enostjo zgodnej\u0161ega odkrivanja te\u017eav v fazi pregleda predlaganih sprememb. ClusterFuzzLite je \u017ee vklju\u010den v procese pregleda sprememb v projektih systemd in curl ter omogo\u010da odkrivanje napak, ki so jih spregledali stati\u010dni analizatorji in linterji, uporabljeni v za\u010detni fazi pregleda nove kode. <\/p>\n

ClusterFuzzLite podpira preverjanje projektov v jeziku C, C++, Java (in drugih jezikih, temelje\u010dih na JVM), Go, Python, Rust in Swift. Fuzzing-testiranje poteka z uporabo motorja LibFuzzer. Za odkrivanje napak pri delu s pomnilnikom in anomaliij se lahko tudi pokli\u010dejo orodja AddressSanitizer, MemorySanitizer in UBSan (UndefinedBehaviorSanitizer). <\/p>\n

Glavne mo\u017enosti ClusterFuzzLite: hitra preveritev predlaganih sprememb za odkrivanje napak pred sprejemanjem kode; nalaganje poro\u010dil o pogojih, ki povzro\u010dajo zru\u0161itve; mo\u017enost prehoda na bolj obse\u017eno fuzzing-testiranje za odkrivanje globljih napak, ki se niso pojavile med preverjanjem spremembe kode; generiranje coverage-poro\u010dil za oceno pokritosti kode med testiranjem; modularna arhitektura, ki omogo\u010da izbiro potrebne funkcionalnosti. <\/p>\n

Spomnimo, da fuzzing-testiranje vklju\u010duje generiranje toka vseh mogo\u010dih naklju\u010dnih kombinacij vhodnih podatkov, ki so blizu realnim podatkom (na primer, html-strani z naklju\u010dnimi parametri oznak, arhivi ali slikami z nenormalnimi glavi in tako naprej) ter bele\u017eenje morebitnih napak pri obdelavi. \u010ce neka zaporedja povzro\u010di zru\u0161itev ali ne ustreza pri\u010dakovani reakciji, to vedenje z visoko verjetnostjo ka\u017ee na napako ali ranljivost.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 ClusterFuzzLite, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u043d\u043d\u0435\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f ClusterFuzz \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f pull-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 GitHub Actions, \u0432 Google Cloud Build \u0438 \u0432 Prow, \u043d\u043e \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 CI-\u0441\u0438\u0441\u0442\u0435\u043c. \u041f\u0440\u043e\u0435\u043a\u0442 \u0431\u0430\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 ClusterFuzz, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102283","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google je predstavil sistem fuzzing-testiranja ClusterFuzzLite | ProHoster","description":"Podjetje Google je predstavilo projekt ClusterFuzzLite, ki omogo\u010da organizacijo fuzzing-testiranja kode za zgodnje odkrivanje potencialnih ranljivosti v fazi delovanja sistemov neprekinjene integracije.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClusterFuzzLite | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 ClusterFuzzLite, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u043d\u043d\u0435\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-14T13:36:53+00:00","article:modified_time":"2021-11-14T13:36:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102283","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-14 13:38:15","updated":"2022-10-05 12:38:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/102283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=102283"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/102283\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=102283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=102283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=102283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}