Fuzzing the CNCF Landscape - Challenges and Results

Explore the results of an extensive fuzzing initiative across the CNCF landscape in this 36-minute conference talk by Adam Korczynski and David Korczynski from Ada Logics. Gain insights into their year-long effort of fuzzing over ten CNCF projects, which led to the discovery and resolution of more than a hundred bugs. Learn about the integration of continuous fuzzing using OSS-Fuzz, a free fuzzing service, and delve into the technical challenges and outcomes encountered in projects such as Kubernetes, Argo, Etcd, Containerd, Vitess, Linkerd2-proxy, runc, and Flux. Acquire a comprehensive understanding of the CNCF fuzzing experience and its impact on improving the security and reliability of cloud-native technologies.