OneFuzz

OneFuzz
Other namesProject OneFuzz
DeveloperMicrosoft
Initial releaseSeptember 18, 2020; 5 years ago (2020-09-18)
Final release
8.9.0 / October 9, 2023; 2 years ago (2023-10-09)
Written inRust, Python
Operating systemWindows, Linux
PlatformCross-platform
TypeFuzzer
LicenseMIT License
Websitewww.microsoft.com/en-us/research/project/project-onefuzz/
Repositorygithub.com/microsoft/onefuzz

OneFuzz is a cross-platform free and open source fuzz testing framework by Microsoft.[1] The software enables continuous developer-driven fuzz testing to identify weaknesses in computer software prior to release.[2]

Overview

OneFuzz is a self-hosted fuzzing-as-a-service platform that automates the detection of software bugs that could be security issues.[1] It supports Windows and Linux.[2]

Notable features include composable fuzzing workflows, built-in ensemble fuzzing, programmatic triage and result de-duplication, crash reporting notification callbacks, and on-demand live-debugging of found crashes.[3][2] The command-line interface client is written in Python 3, and targets Python 3.7 and up.[4]

Microsoft uses the OneFuzz testing framework to probe Edge, Windows and other products at the company.[1] It replaced the previous Microsoft Security Risk Detection software testing mechanism.[2]

The source code was released on September 18, 2020.[1] It is licensed under MIT License and hosted on GitHub.[5]

On August 31, 2023, it was announced that development would be coming to an end. On November 1, 2023, the GitHub project was archived.[5]

See also

References

  1. ^ a b c d "Microsoft: Windows 10 is hardened with these fuzzing security tools – now they're open source". ZDNet. September 15, 2020.
  2. ^ a b c d "Microsoft open-sources fuzzing test framework". InfoWorld. September 17, 2020.
  3. ^ "Microsoft's Security Group Open Sources Fuzzing Framework for Azure". ADTmag.com. September 22, 2020.
  4. ^ "OneFuzz- Microsoft Open Source Fuzzing Platform". hackersonlineclub.com. September 19, 2020.
  5. ^ a b "GitHub - microsoft/onefuzz: A self-hosted Fuzzing-As-A-Service platform". November 1, 2023 – via GitHub.

Content Disclaimer

Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.

  1. The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
  2. There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
  3. It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
  4. Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
  5. Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.