Google, Adobe Announce New Open Source Security Tools

guest · Nov 12, 2021

Google, Adobe Announce New Open Source Security Tools
November 12, 2021
https://www.securityweek.com/google-adobe-announce-new-open-source-security-tools

Google and Adobe this week announced the availability of new open source security tools, for continuous fuzzing and detecting living-off-the-land attacks.
Google releases ClusterFuzzLite
Google announced the open source release of ClusterFuzzLite, which it described as a ClusterFuzz-based continuous fuzzing solution that runs as part of continuous integration (CI) workflows in an effort to help users find vulnerabilities before they are committed to the source code.
Click to expand...

ClusterFuzzLite can be integrated into CI workflows with only a few lines of code.

“With the release of ClusterFuzzLite, any project can integrate this essential testing standard and benefit from fuzzing,” Google said. “ClusterFuzzLite offers many of the same features as ClusterFuzz, such as continuous fuzzing, sanitizer support, corpus management, and coverage report generation. Most importantly, it’s easy to set up and works with closed source projects, making ClusterFuzzLite a convenient option for any developer who wants to fuzz their software.”
Click to expand...

Adobe releases LotL Classifier
Living-off-the-land (LotL) is used to describe attacks where malicious actors leverage legitimate software in an effort to avoid being detected.

Adobe has released an open source tool, named LotL Classifier, that is designed to detect LotL attacks by leveraging a “feature extraction” component and a machine learning-based classifier algorithm.
The feature extraction component takes data from threat intelligence, malware analysis, real incidents and real data logs, and uses that data to generate a series of tags based on binaries, paths, keywords, networks, patterns, and similarity.
Click to expand...

Google: ClusterFuzzLite: Continuous fuzzing for all

Today, we are excited to announce ClusterFuzzLite, a continuous fuzzing solution that runs as part of CI/CD workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch bugs before they are committed, enhancing the overall security of the software supply chain.
Click to expand...

Adobe: Living off the Land (LotL) Classifier Open-Source Project

In security, “Living off the Land” (LotL or LOTL)-type attacks are not new. Bad actors have been using legitimate software and functions to target systems and carry out malicious attacks for many years. And although it’s not novel, LotL is still one of the preferred approaches even for highly skilled attackers.

The security intelligence team at Adobe set out to help fix this problem. Using open source and other representative incident data, we developed a dynamic and high-confidence program, called LotL Classifier, and then we open sourced it to the broader community.
Click to expand...

Log in or Sign up

Google, Adobe Announce New Open Source Security Tools

guest Guest

Log in or Sign up

Google, Adobe Announce New Open Source Security Tools

guest Guest

Useful Searches