Advanced Software Security. Vulnerability analysis, software auditing and security automation. adalogics.com/contact
Oxford, England
- Tweets 335
- Following 2
- Followers 369
- Likes 511
Pinned Tweet
Our newly released program analysis bundle is available for online and self-paced training! Come and learn #fuzzing #llvm #programanalysis #vulnerabilityananlysis and much more with our online courses! adalogics.com/courses
1
2
6
Happy to announce our #fuzzing work on #LLVM focused on continuous fuzzing by way of OSS-Fuzz -- LLVM is now the project with most lines covered of all OSS-Fuzz projects! Thanks to collaborators @OSTIFofficial and @sovtechfund Full report is available in adalogics.com/blog/llvm-fuzz…
3
11
2,381
ADA Logics retweeted
Our first audit in collaboration with @sovtechfund's Bug Resilience Program is now published!
5 Jackson subprojects underwent holistic security work via this engagement, with auditing by @ADALogics. Read more at ostif.org/dataformatsdatatyp…
4
4
1,118
ADA Logics retweeted
🔒 @KnativeProject has completed a third-party security audit! Check out the highlights on the blog from @AdamKorcz4 👇 cncf.io/blog/2023/12/11/knat…
4
15
3,832
ADA Logics retweeted
@KnativeProject security audit -- Verifiable provenance with #SLSA , #fuzzing with OSS-Fuzz and manual code auditing. Several interesting findings with full details in the accompanying report. Thanks to @OSTIFofficial and @CloudNativeFdn for the collaboration.
🔒 @KnativeProject has completed a third-party security audit! Check out the highlights on the blog from @AdamKorcz4 👇 cncf.io/blog/2023/12/11/knat…
2
6
384
ADA Logics retweeted
With @ADALogics and @CloudNativeFdn, OSTIF completed a security audit of @KnativeProject- such a great engagement, well done to everyone! Find out what we're talking about at ostif.org/knative-audit-comp…
3
6
2,290
Holistic security audit of @kyverno : Supply Chain Security with #SLSA, #Fuzzing with OSS-Fuzz, Manual code review and Threat modelling! Full details in the report. Great collaboration with @kyverno maintainers, @OSTIFofficial and @CloudNativeFdn
The #Kyverno project has completed a third-party #securityaudit 💪
The main goals were to:
- Define a threat model
- Conduct a manual code audit
- Assess #fuzzing
- Evaluate #supplychain risks against #SLSA
See the results from Kyverno + Ada Logics: cncf.io/blog/2023/12/05/kyve…
4
175
ADA Logics retweeted
Security audit of @kyverno -- details in the report. Holistic audit including #SLSA supply chain security assessment, #fuzzing by way of OSS-Fuzz, code review, threat modelling and more. Kudos to @AdamKorcz4 for leading and thanks to @kyverno @OSTIFofficial @CloudNativeFdn
The #Kyverno project has completed a third-party #securityaudit 💪
The main goals were to:
- Define a threat model
- Conduct a manual code audit
- Assess #fuzzing
- Evaluate #supplychain risks against #SLSA
See the results from Kyverno + Ada Logics: cncf.io/blog/2023/12/05/kyve…
3
6
812
ADA Logics retweeted
The Kyverno project collaborated with @ADALogics @OSTIFofficial and @CloudNativeFdn to complete a comprehensive 3rd party security audit, and fix all issues found during the audit.
cncf.io/blog/2023/12/05/kyve…
#Kubernetes #Security
7
13
2,727
ADA Logics retweeted
Get the lowdown on @kyverno's security audit by @ADALogics with support from @CloudNativeFdn and yours truly at ostif.org/kyverno-audit-comp…. What can we say, the work speaks for itself- but you gotta read to get the details!
3
7
386
We made a video introducing a recent OSS-Fuzz Visual Studio Code extension! Exciting new extension to help writing fuzzing harnesses for open source projects easier
OSS-Fuzz Visual Studio Code Extension Introduction! New extension that can significantly improve #fuzz dev experience. I made a demo in which I increase cJSON code coverage from 43% to 73% using convenient features from the extension: piped.video/watch?v=7bvRbESP…
2
5
226
ADA Logics retweeted
Excited to release a #CNCF #fuzzing handbook, focused on how to get started with fuzzing and includes an entire chapter on OSS-Fuzz and how to integrate open source projects for continuous fuzzing. Handbook available on GitHub: github.com/cncf/tag-security…
[NEWS FROM #KUBECON] Learn about updates to #CNCF Fuzzing practices for 2023!
Fuzzing is crucial for ensuring secure and reliable software 🔒
Recent updates include a new Fuzzing Handbook + 3 recent audits for #Dapr, #Kyverno + #Knative!
Read more: cncf.io/blog/2023/11/07/cncf…
12
31
8,325
ADA Logics retweeted
[NEWS FROM #KUBECON] Learn about updates to #CNCF Fuzzing practices for 2023!
Fuzzing is crucial for ensuring secure and reliable software 🔒
Recent updates include a new Fuzzing Handbook + 3 recent audits for #Dapr, #Kyverno + #Knative!
Read more: cncf.io/blog/2023/11/07/cncf…
9
14
11,738
ADA Logics retweeted
Made a video on open source fuzzing introspection and how you can analyze the fuzzing set up of OSS-Fuzz projects using introspector.oss-fuzz.com -- piped.video/RLoLfo2V2HI e.g. track coverage progress, find interesting targets and more!
19
85
9,275
ADA Logics retweeted
Curious about how a project on OSS-Fuzz is doing? Check out introspector.oss-fuzz.com/ !
This provides runtime/statically-reachable coverage stats for all supported (C/++,Python,Java) OSS-Fuzz projects, as well as a neat function database to search through.
2
14
44
7,925
ADA Logics retweeted
The #Vitess maintainer team has announced the results of its recent 3rd party security audit!
No Critical issues were found during the audit 🎉
Learn more: cncf.io/blog/2023/06/05/vite…
5
14
5,158
ADA Logics retweeted
The Vitess Maintainer team is pleased to announce the results of a recent third-party security audit of the Vitess code base.
vitess.io/blog/2023-06-05-vi…
1
7
12
2,167
ADA Logics retweeted
I’m proud of the work and investment we do in improving the security of CNCF projects #kubecon #cloudnativecon
[NEWS from #KubeCon] CNCF fuzzing open source projects for security and reliability
cncf.io/blog/2023/04/18/cncf…
4
15
1,775
ADA Logics retweeted
[NEWS from #KubeCon] CNCF fuzzing open source projects for security and reliability
cncf.io/blog/2023/04/18/cncf…
1
5
26
10,384
ADA Logics retweeted
We created a bridge to Fuzz Introspector data generated by OSS-Fuzz that you can use programmatically -- e.g. in a few lines of code find the most complex uncovered functions in a given project: fuzz-introspector.readthedoc…
1
6
23
3,177
ADA Logics retweeted
Continuous #fuzzing of @HelmPack -- 4 CVEs, 38 fuzzers and OSS-Fuzz setup! Check out the full details in the blog post and accompanying report :)
1
4
14
884