SECURITY HUB: Fuzzing Introduction + OSS-Fuzz Demo - Adam & David Korczynski, Ada Logics
Channel: CNCF [Cloud Native Computing Foundation]
Date: 2023-11-22

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon Europe in Paris from March 19-22, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

SECURITY HUB: Fuzzing Introduction + OSS-Fuzz Demo - Adam & David Korczynski, Ada Logics

Fuzzing is a technique used for finding bugs and vulnerabilities in software. The technique has been applied on many CNCF projects and tech giants fuzz daily thousands of software packages for security issues. However, it may not be easy to take the first steps in the fuzzing world and, furthermore, understand which direction to navigate towards when beginning a fuzzing journey.

This is a talk and demo presentation that introduces fuzzing and common tools in the open source space related to fuzzing. We will focus on showcasing the initial first steps needed towards setting up a mature fuzzing set up for an open source project. OSS-Fuzz is a service for running continuous fuzzing on open source projects and we will introduce both fuzzing in general as well as OSS-Fuzz as a platform. The goal of this talk is to give a pragmatic introduction to audience members that may be interested in how to navigate the fuzzing space but may not know where to get started.