Advanced Software Security. Vulnerability analysis, software auditing and security automation. https://xitter.cf/t.co/otKkF9vOSd
Oxford, England
Joined October 2018
- Tweets335
- Following2
- Followers369
- Likes511
Pinned Tweet
Our newly released program analysis bundle is available for online and self-paced training! Come and learn #fuzzing #llvm #programanalysis #vulnerabilityananlysis and much more with our online courses! adalogics.com/courses
Happy to announce our #fuzzing work on #LLVM focused on continuous fuzzing by way of OSS-Fuzz -- LLVM is now the project with most lines covered of all OSS-Fuzz projects! Thanks to collaborators @OSTIFofficial and @sovtechfund Full report is available in adalogics.com/blog/llvm-fuzz…
ADA Logics retweeted
Our first audit in collaboration with @sovtechfund's Bug Resilience Program is now published!
5 Jackson subprojects underwent holistic security work via this engagement, with auditing by @ADALogics. Read more at ostif.org/dataformatsdatatyp…
ADA Logics retweeted
🔒 @KnativeProject has completed a third-party security audit! Check out the highlights on the blog from @AdamKorcz4 👇 cncf.io/blog/2023/12/11/knat…
ADA Logics retweeted
@KnativeProject security audit -- Verifiable provenance with #SLSA , #fuzzing with OSS-Fuzz and manual code auditing. Several interesting findings with full details in the accompanying report. Thanks to @OSTIFofficial and @CloudNativeFdn for the collaboration.
🔒 @KnativeProject has completed a third-party security audit! Check out the highlights on the blog from @AdamKorcz4 👇 cncf.io/blog/2023/12/11/knat…
ADA Logics retweeted
With @ADALogics and @CloudNativeFdn, OSTIF completed a security audit of @KnativeProject- such a great engagement, well done to everyone! Find out what we're talking about at ostif.org/knative-audit-comp…
Holistic security audit of @kyverno : Supply Chain Security with #SLSA, #Fuzzing with OSS-Fuzz, Manual code review and Threat modelling! Full details in the report. Great collaboration with @kyverno maintainers, @OSTIFofficial and @CloudNativeFdn
The #Kyverno project has completed a third-party #securityaudit 💪
The main goals were to:
- Define a threat model
- Conduct a manual code audit
- Assess #fuzzing
- Evaluate #supplychain risks against #SLSA
See the results from Kyverno + Ada Logics: cncf.io/blog/2023/12/05/kyve…
ADA Logics retweeted
Security audit of @kyverno -- details in the report. Holistic audit including #SLSA supply chain security assessment, #fuzzing by way of OSS-Fuzz, code review, threat modelling and more. Kudos to @AdamKorcz4 for leading and thanks to @kyverno @OSTIFofficial @CloudNativeFdn
The #Kyverno project has completed a third-party #securityaudit 💪
The main goals were to:
- Define a threat model
- Conduct a manual code audit
- Assess #fuzzing
- Evaluate #supplychain risks against #SLSA
See the results from Kyverno + Ada Logics: cncf.io/blog/2023/12/05/kyve…
ADA Logics retweeted
The Kyverno project collaborated with @ADALogics @OSTIFofficial and @CloudNativeFdn to complete a comprehensive 3rd party security audit, and fix all issues found during the audit.
cncf.io/blog/2023/12/05/kyve…
#Kubernetes #Security
ADA Logics retweeted
Get the lowdown on @kyverno's security audit by @ADALogics with support from @CloudNativeFdn and yours truly at ostif.org/kyverno-audit-comp…. What can we say, the work speaks for itself- but you gotta read to get the details!
We made a video introducing a recent OSS-Fuzz Visual Studio Code extension! Exciting new extension to help writing fuzzing harnesses for open source projects easier
OSS-Fuzz Visual Studio Code Extension Introduction! New extension that can significantly improve #fuzz dev experience. I made a demo in which I increase cJSON code coverage from 43% to 73% using convenient features from the extension: youtube.com/watch?v=7bvRbESP…
ADA Logics retweeted
Excited to release a #CNCF #fuzzing handbook, focused on how to get started with fuzzing and includes an entire chapter on OSS-Fuzz and how to integrate open source projects for continuous fuzzing. Handbook available on GitHub: github.com/cncf/tag-security…
ADA Logics retweeted
Made a video on open source fuzzing introspection and how you can analyze the fuzzing set up of OSS-Fuzz projects using introspector.oss-fuzz.com -- youtu.be/RLoLfo2V2HI e.g. track coverage progress, find interesting targets and more!
ADA Logics retweeted
Curious about how a project on OSS-Fuzz is doing? Check out introspector.oss-fuzz.com/ !
This provides runtime/statically-reachable coverage stats for all supported (C/++,Python,Java) OSS-Fuzz projects, as well as a neat function database to search through.
ADA Logics retweeted
The #Vitess maintainer team has announced the results of its recent 3rd party security audit!
No Critical issues were found during the audit 🎉
Learn more: cncf.io/blog/2023/06/05/vite…
ADA Logics retweeted
The Vitess Maintainer team is pleased to announce the results of a recent third-party security audit of the Vitess code base.
vitess.io/blog/2023-06-05-vi…
ADA Logics retweeted
I’m proud of the work and investment we do in improving the security of CNCF projects #kubecon #cloudnativecon – at Amsterdam, The Netherlands
[NEWS from #KubeCon] CNCF fuzzing open source projects for security and reliability
cncf.io/blog/2023/04/18/cncf…
ADA Logics retweeted
[NEWS from #KubeCon] CNCF fuzzing open source projects for security and reliability
cncf.io/blog/2023/04/18/cncf…
ADA Logics retweeted
We created a bridge to Fuzz Introspector data generated by OSS-Fuzz that you can use programmatically -- e.g. in a few lines of code find the most complex uncovered functions in a given project: fuzz-introspector.readthedoc…
