{"id":102283,"date":"2021-11-14T15:36:53","date_gmt":"2021-11-14T13:36:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite"},"modified":"2021-11-14T15:36:53","modified_gmt":"2021-11-14T13:36:53","slug":"google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","title":{"rendered":"Google prezantoi sistemin e testimit fuzzing ClusterFuzzLite","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania Google paraqiti projektin ClusterFuzzLite, i cili mund\u00ebson organizimin e testimit fuzzing t\u00eb kodit p\u00ebr zbulimin e hersh\u00ebm t\u00eb potencialeve t\u00eb dob\u00ebsive n\u00eb faz\u00ebn e pun\u00ebs s\u00eb sistemeve t\u00eb integrimit t\u00eb vazhduesh\u00ebm. Aktualisht, ClusterFuzz mund t\u00eb p\u00ebrdoret p\u00ebr automatizimin e testimit fuzzing t\u00eb k\u00ebrkesave pull n\u00eb GitHub Actions, n\u00eb Google Cloud Build dhe n\u00eb Prow, por n\u00eb t\u00eb ardhmen pritet t\u00eb ket\u00eb mb\u00ebshtetje edhe p\u00ebr sisteme t\u00eb tjera CI. Projekti bazohet n\u00eb platform\u00ebn ClusterFuzz, e krijuar p\u00ebr t\u00eb koordinuar pun\u00ebn e klastereve t\u00eb testimit fuzzing, dhe shp\u00ebrndahet sipas licenc\u00ebs Apache 2.0. <\/p>\n
Pasqyrohet se, pas implementimit n\u00eb vitin 2016 nga kompania Google t\u00eb sh\u00ebrbimit OSS-Fuzz n\u00eb programin e testimit t\u00eb vazhduesh\u00ebm fuzzing, jan\u00eb pranuar m\u00eb shum\u00eb se 500 projekte t\u00eb r\u00ebnd\u00ebsishme t\u00eb hapura. Bazuar n\u00eb kontrollimet e kryera, jan\u00eb eliminuar mbi 6500 vulnerabilitete t\u00eb konfirmuara dhe jan\u00eb rregulluar m\u00eb shum\u00eb se 21 mij\u00eb gabime. ClusterFuzzLite vazhdon zhvillimin e mekanizmave t\u00eb testimit fuzzing me mund\u00ebsin\u00eb e identifikimit m\u00eb t\u00eb hersh\u00ebm t\u00eb problemeve gjat\u00eb faz\u00ebs s\u00eb rishikimit t\u00eb ndryshimeve t\u00eb propozuara. ClusterFuzzLite \u00ebsht\u00eb tashm\u00eb integruar n\u00eb proceset e rishikimit t\u00eb ndryshimeve n\u00eb projektet systemd dhe curl, duke lejuar identifikimin e gabimeve t\u00eb cilat jan\u00eb neglizhuar nga analizator\u00ebt statik\u00eb dhe linter-\u00ebt q\u00eb jan\u00eb p\u00ebrdorur n\u00eb faz\u00ebn fillestare t\u00eb kontrollit t\u00eb kodit t\u00eb ri. <\/p>\n
ClusterFuzzLite mb\u00ebshtet verifikimin e projekteve n\u00eb gjuh\u00ebt C, C++, Java (dhe gjuh\u00ebt e tjera t\u00eb bazuara n\u00eb JVM), Go, Python, Rust dhe Swift. Testimi fuzzing kryhet duke p\u00ebrdorur motorin LibFuzzer. P\u00ebr t\u00eb identifikuar gabimet n\u00eb pun\u00ebn me memorie dhe anomalit\u00eb, gjithashtu mund t\u00eb thirren mjetet AddressSanitizer, MemorySanitizer dhe UBSan (UndefinedBehaviorSanitizer). <\/p>\n
Ve\u00e7orit\u00eb kryesore t\u00eb ClusterFuzzLite: verifikim i shpejt\u00eb i ndryshimeve t\u00eb propozuara p\u00ebr t\u00eb gjetur gabimet n\u00eb faz\u00ebn e para miratimit t\u00eb kodit; ngarkimi i raporteve mbi kushtet e shfaqjes s\u00eb d\u00ebshtimeve; mund\u00ebsia p\u00ebr t\u00eb kaluar n\u00eb testimin m\u00eb t\u00eb avancuar t\u00eb fuzzing p\u00ebr t\u00eb zbuluar gabime m\u00eb t\u00eb thella, t\u00eb cilat nuk dol\u00ebn pas verifikimit t\u00eb ndryshimit t\u00eb kodit; gjenerimi i raporteve t\u00eb mbulimit p\u00ebr t\u00eb vler\u00ebsuar nivelin e mbulimit t\u00eb kodit gjat\u00eb testimeve; arkitektur\u00eb modulare q\u00eb lejon zgjedhjen e funksionaliteteve t\u00eb nevojshme. <\/p>\n
T\u00eb kujtojm\u00eb se gjat\u00eb testimit t\u00eb fuzzing, gjenerohet nj\u00eb rrjedh\u00eb t\u00eb gjitha llojeve t\u00eb kombinimeve t\u00eb rast\u00ebsishme t\u00eb t\u00eb dh\u00ebnave hyr\u00ebse, t\u00eb af\u00ebrta me t\u00eb dh\u00ebnat reale (p.sh., faqe html me parametra t\u00eb rast\u00ebsish\u00ebm t\u00eb etiketave, arkiva ose imazhe me tituj anomali etj.), dhe regjistrohen d\u00ebshtimet e mundshme gjat\u00eb p\u00ebrpunimit t\u00eb tyre. N\u00ebse nj\u00eb sekuenc\u00eb e till\u00eb \u00e7on n\u00eb nj\u00eb d\u00ebshtim ose nuk p\u00ebrputhet me reagimin e pritur, nj\u00eb sjellje e till\u00eb me shum\u00eb mund\u00ebsi tregon p\u00ebr nj\u00eb gabim ose vulnerabilitet. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"