firecracker-microvm
[Hardening] Continuously fuzz all Firecracker guest-facing attack surfaces
Constantly run a fuzzer against guest facing attack surfaces, including the entire device model as well as the MMDS interface.
What is the timeline for this? I am new to rust but would like to try this fuzz testing.
There's nobody working on this right now, so no timeline either. If you want to give it a shot, it's all yours. We do have some previous work here for virtio fuzzing (which we also plan to add to the repo), but in the fuzzing world, the more the merrier.
A good first step might be to figure out how to run 1 fuzzing session against one category of attack surface, and then leave the continuous integration part for another step.
We do have some previous work here for virtio fuzzing
Is that code somewhere available to grok?
It would be worth investing some research into whether we could also gather memory leaks related results from the fuzzing process.
The team has made progress toward this task developing an initial fuzzy framework which test every night our main branch to search for regressions. Currently we are testing:
- some virtio devices
- some legacy devices
- api server
We will need additional work to cover the whole guest facing interface expanding such tests to the entire set of devices and mmds
We have implemented continuous fuzzing in Firecracker in the course of 2023. It is currently private.
