Google Allows You to Use ‘ClusterFuzzLite’ Fuzz Testing Integration Tool

ClusterFuzzLite refers to an automated software testing tool that uses invalid, unexpected, or random data as input to an application to detect problems such as potential memory leaks.

Jonathan Metzman, senior software engineer at Google, said ClusterFuzzLite is a simpler version of a tool that Google makes available to its in-house development teams. The results of a fuzz test within a DevOps workflow. Once these results are in hand, it is easier for developers to troubleshoot problems before deploying an application in a production environment.

Read also

WhatsApp Added Feature of Hiding ‘Last Seen’ from Specific People

Recreate Red Beauty Looks Like Taylor Swift

Core capabilities of Fuzz testing Integration tool include continuous fuzzing, cleanup support, corpus management, and reporting tools. The goal is to make fuzz testing more accessible to a wider range of developers as part of the overall effort to adopt DevSecOps best practices, noted Metzman. .

ClusterFuzzLite currently supports GitHub Actions and Google Cloud Build, but Metzman said it is easily extensible to other DevOps platforms. It’s designed to run as part of a DevOps workflow by adding a few lines of code to a Continuous Integration / Continuous Delivery (CI / CD) workflow.

Google has already made ClusterFuzzLite available to open source projects, but now offers additional access for commercial developers.Regardless of the motivation, however, the overall health of the application security should continue to improve as it becomes easier for developers to invoke more advanced testing tools.

Meanwhile, organizations of all sizes are reviewing how they develop software after a number of high-profile security breaches. In theory at least, a stronger focus on software supply chains should prevent post-implementation issues from occurring when that is the most costly remedy.