Google Rolls Out ClusterFuzzLite For Easy-To-Use, Continuous Fuzzing

[phoronix]

Phoronix: Google Rolls Out ClusterFuzzLite For Easy-To-Use, Continuous Fuzzing

As part of Google's effort around fuzzing for improving open-source security, the company today announced ClusterFuzzLite as their new, easy-to-use solution for fuzzing open and closed-source projects with ease as part of the CI/CD process...

https://www.phoronix.com/scan.php?page=news_item&px=Google-ClusterFuzzLite

[ddriver]

"fuzzing for improving open-source security" - only open source?

[metzman]

>"fuzzing for improving open-source security" - only open source?

The writeup isn't exactly right. It's about improving security everywhere. ClusterFuzzLite is actually intended fills a gap for closed source projects since open source projects can already use OSS-Fuzz.

[microcode]

"fuzzing for improving open-source security" - only open source?

Well, they run a bunch of cloud instances on company dollar to continuously fuzz open source projects, especially those used in their products (Chromium, GCE, etc.), and from their perspective, other people's proprietary code is not even relevant... Nothing stops you from using the tool though.

[metzman]

Well, they run a bunch of cloud instances on company dollar to continuously fuzz open source projects, especially those used in their products (Chromium, GCE, etc.), and from their perspective, other people's proprietary code is not even relevant... Nothing stops you from using the tool though.

Right, we provide oss-fuzz as a serivce to open source projects. Closed source fuzzing as a service would have been too hard for us logistically. While closed source users could run ClusterFuzz themselves. ClusterFuzzLite lowers the bar significantly.

[AusMatt]

typo: "GitHub Actionsi ntegration"