Microsoft Release of Project OneFuzz, an Open Source Fuzzing Framework for Azure


Microsoft revealed on Tuesday the release of Project OneFuzz, Azure’s open source fuzzing platform, which the software giant has been using internally for the past year to identify and fix glitches.

Fuzzing is used to diagnose programme glitches and other flaws by inserting malformed data into the intended programme and see whether it fails or acts suddenly, which may suggest an issue.

Project OneFuzz, defined by Microsoft as an extensible fuzz testing system, is designed to solve some of the problems usually associated with fuzzing, enabling developers to perform themselves this form of testing and enabling security engineers to concentrate on more essential tasks.

The firm says it has internally used Project OneFuzz for Windows, Edge and other things.

“The aim of Microsoft to allow developers to test their code quickly and constantly before release is fundamental to our empowerment mission. Project OneFuzz’s global release is designed to help to harden the networks and resources that support our everyday jobs and personal lives and make the task of an attacker more challenging, “says Microsoft.

Project OneFuzz can be used on Windows or Linux operating systems, it allows users to instal their own fuzers, it has helpful triage and outcome deduplication features, and when a crash is detected, users can call live debugging sessions.

Microsoft says the project will continue to be supported and extended but still accepts community donations.

The source code for the Project OneFuzz is available at GitHub.

Mark Funk
Mark Funk is an experienced information security specialist who works with enterprises to mature and improve their enterprise security programs. Previously, he worked as a security news reporter.