Speaker
Description
Fuzzing is a powerful testing technique for uncovering hidden bugs, crashes, and security vulnerabilities. But for many developers, getting started with fuzzing and integrating it into real-world projects can feel overwhelming. In this workshop, you will learn how to use OSS-Fuzz, Google’s infrastructure for continuous fuzz testing, to secure open source software.
Drawing from real experience integrating OpenPrinting projects into OSS-Fuzz during Google Summer of Code 2025, this workshop will guide you through every essential step:
- Understanding the basics of fuzzing and why it matters for security
- Setting up your environment with Docker and Python
- Writing your first fuzz target in Go or Python
- Creating the required files for OSS-Fuzz: Dockerfile, build.sh, and project.yaml
- Running fuzzers locally, catching crashes, and understanding logs
- Exploring code coverage using Fuzz Introspector
- Best practices for debugging and improving fuzz tests
By the end of the session, you will have a working fuzzing setup, a running fuzzer, and a better understanding of how to secure your software through automated testing.
Who should attend?
This workshop is ideal for students, open source contributors, and developers who want to learn practical fuzzing. No prior experience with fuzzing is required, but basic knowledge of programming and using Docker will be helpful.
Session author's bio
Mohammed Imaduddin is a final-year Computer Science undergraduate and an open source contributor under the Google Summer of Code 2025 program. His work with OpenPrinting focuses on integrating fuzz testing into widely-used printing software written in Go and Python.
| Level of Difficulty | Intermediate |
|---|---|
| Please confirm that there are included headshots of all speakers in their profiles | Yes |
| Agree to Privacy Policy and Notice | I agree |
| In Person Attendance | In-person |