Open-Source and Hosted Fuzz Testing

This 12-minute talk from the Linux Foundation demonstrates how to implement fuzz testing in software development projects. Learn about fuzzing, a powerful testing technique that feeds automatically generated data to programs to identify bugs and security vulnerabilities with minimal false positives. Discover how to easily fuzz test Bazel C/C++, Java, and multi-language projects using the open-source CLI tool cifuzz developed by Code Intelligence and rules_fuzzing. Speaker Fabian Meumertzheim explains both open-source options and commercial solutions that provide CI/CD triggered remote fuzzing capabilities and web interfaces for managing findings. The presentation covers testing applications with REST or gRPC APIs, including those built with Go services, making it relevant for developers working with complex, multi-service architectures.