Google Compares Two Tools for Finding Bugs in JavaScript Engines
Google's Project Zero security team has published a comparison of two bug-hunting tools, Fuzzilli and BigSleep. Both are tested on JavaScript engines, the software that runs code in web browsers. The article sets fuzzing against an AI-based approach.
Quick glossaryGoogle, fuzzing, BigSleep
- US tech company best known for its search engine, Android phones and Chrome browser.
- fuzzing
- Testing software by flooding it with random or unusual inputs to see where it crashes.
- BigSleep
- An AI-based tool that automatically searches software for security bugs and weak spots so people can fix them.
Burning Potato score: 78%