Tag: OSS-Fuzz
-
How to squash bugs by enrolling in OSS-Fuzz
This is the final blog of a four-part series about how I am helping to harden the security of the Exiv2 project. This post is about how we …
-
Launching OSV – Better vulnerability triage for open source
We are excited to launch OSV (Open Source Vulnerabilities), our first step towards improving vulnerability triage for developers and …
-
Google launches FuzzBench service to benchmark fuzzing tools
First came ‘fuzzing’, a long-established technique for spotting bugs such as security flaws in real applications using automated tools. …
-
Open sourcing ClusterFuzz
Fuzzing is an automated method for detecting bugs in software that works by feeding unexpected inputs to a target program. It is effective …
-
A new chapter for OSS-Fuzz
Cross-posted on the Google Security Blog. Open source software (OSS) is extremely important to Google, and we rely on OSS in a variety of …
●●●