Improving Opensource Software Security Using Fuzzing

Open-source software (OSS) forms the backbone of modern digital infrastructure, powering countless applications and services.Despite its widespread use and collaborative development model, OSS often lacks comprehensive security testing, making it vulnerable to hidden flaws and potential exploitation.This project investigates the role of fuzzing-a dynamic and automated testing technique-in enhancing the security of open source software.Fuzzing works by generating and injecting random or malformed inputs into programs to uncover critical issues such as crashes, memory corruption, and logic errors.We implemented and analysed several fuzzing tools, including AFL, Lib Fuzzer, and OSS-Fuzz, across multiple open-source projects.Our experiments demonstrated fuzzing's effectiveness in identifying vulnerabilities that would likely remain undetected using traditional testing methods.Additionally, we explored the integration of fuzzing into continuous integration and deployment (CI/CD) pipelines to ensure ongoing security throughout the software lifecycle.