RUS  ENG
Full version
JOURNALS // Proceedings of the Institute for System Programming of the RAS // Archive

Proceedings of ISP RAS, 2024 Volume 36, Issue 3, Pages 167–188 (Mi tisp895)

Platform for automatic fuzzing of os components

E. P. Suraev, V. V. Egorova, A. S. Panov

PJSC Astra Group

Abstract: Automation of security analysis processes plays an important role in software development, because it allows vulnerabilities to be detected and fixed at an early stage. This article presents the development outcomes of an automated fuzz-testing platform, as well as its integration with a platform for processing and storing the results of various security analysis tools. The developed platform integrates security analysis tools into a single testing system embedded in the continuous integration process. The proposed platform not only simplifies and speeds up the testing and analysis processes, but also increases the accuracy of vulnerability detection through results aggregation and the application of machine learning algorithms for marking and prioritizing detected errors. This approach allows developers to identify and correct vulnerabilities in a timely manner, contributing to the creation of more reliable and secure products.

Keywords: dynamic analysis, security analysis, fuzz-testing automation, fuzzing

DOI: 10.15514/ISPRAS-2024-36(3)-12



© Steklov Math. Inst. of RAS, 2024