October 24, 2022 | Detroit, Michigan
View More Details & Registration Information

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon North America 2022 - Detroit, MI + Virtual and add this Co-Located event to your registration to participate in these sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Eastern Daylight Time (EDT), UTC -4. To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

The schedule is subject to change.
Back To Schedule
Monday, October 24 • 2:00pm - 2:30pm
Fuzz Testing of Envoy - Adi Peleg & Teju Nareddy, Google

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
How can we be assured of the correctness and safety of the many Envoy parsers and state machines in the presence of untrusted or adversarial input? While developers cover main scenarios using tests, complex edge cases may be missed. Adversaries may be able to exploit these cases to trigger denial of service attacks, access Envoy process memory remotely, or trigger remote execution of malicious code. Fuzzing is an automated software testing technique that provides randomized input to the system under test (SUT). Some tests may use a variety of sanitizers to check for violations of memory safety, check for invariants expressed as assert statements or abnormal program terminations or timeouts. Other tests may compare behavior of different SUTs to the same input. This talk will include an overview of different fuzzers in Envoy, the OSS-Fuzz infrastructure for running fuzz tests, some bugs fuzz tests discovered, and examples of creating specific fuzz tests for ESF components in Envoy.

avatar for Adi Peleg

Adi Peleg

Software Engineer, Google
Adi is a software engineer at Google, working on the Envoy project.
avatar for Teju Nareddy

Teju Nareddy

Software Engineer, Google
Teju Nareddy is a software engineer working on Google's API Service Infrastructure. He is involved in multiple efforts to create Envoy-based API Gateways at Google, from spearheading OSS ESPv2 for Cloud Endpoints to building Google Cloud Platform's managed API Gateway. Teju is an... Read More →

Monday October 24, 2022 2:00pm - 2:30pm EDT
Room 310 B Huntington Place: 1 Washington Blvd, Detroit, MI 48226