Add fuzzing page #282
Add fuzzing page #282
Conversation
| @@ -0,0 +1,40 @@ | |||
| # Fuzzing Ethereum's devp2p Protocol | |||
There was a problem hiding this comment.
the title shouldn't be only focused on devp2p but take a general approach of explaining fuzzing testing
|
|
||
|
|
||
|
|
||
| The Ethereum network, a cornerstone of decentralized applications, is a prime target for potential security breaches due to its widespread adoption. Ensuring the maximum security of the network and node interactions is crucial to prevent significant problems. The devp2p protocols, responsible for facilitating communication between Ethereum nodes, are a critical area of focus to enhance network security. Fuzzing, a robust testing technique, can be employed to identify vulnerabilities and potential issues in the Ethereum network's devp2p protocols using the Go programming language. |
There was a problem hiding this comment.
Intro to Ethereum is not necessary here, you should just get to the point about testing and how fuzzing benefits the testing/security infrastructure
|
|
||
| Fuzzer programs provide invalid, unexpected, or random data as inputs to a computer program, monitoring for exceptions such as crashes, failing built-in code assertions, or potential memory leaks. By leveraging fuzzers, we can simulate diverse scenarios, identify unexpected behaviors, and uncover vulnerabilities that may not be apparent through traditional testing. | ||
|
|
||
| By harnessing the power of fuzzing and developing fuzzers in Golang to interact with Geth's devp2p protocols, we can bolster the security of the Ethereum network. Targeted fuzzing enables the Ethereum community to proactively address potential threats, ensuring the robustness and longevity of the Ethereum ecosystem. |
There was a problem hiding this comment.
the whole body should be changed to more approachable structure, e.g. paragraphs like
Intro to fuzzing
How it fits to Ethereum testing landscape
What are benefits, specifics
Hands on examples of how fuzzing is used in different parts of the protocol (not just el p2p)
| By harnessing the power of fuzzing and developing fuzzers in Golang to interact with Geth's devp2p protocols, we can bolster the security of the Ethereum network. Targeted fuzzing enables the Ethereum community to proactively address potential threats, ensuring the robustness and longevity of the Ethereum ecosystem. | ||
|
|
||
|
|
||
| ### Here is a list of different fuzzers made by Ethereum contributors: |
There was a problem hiding this comment.
List of fuzzer tech is good but the title should be simplified to just a 'List of fuzzing tools' or so. Ideally, this paragraph should provide a context about each fuzzer
Wiki PR Checklist
Thank you for contributing to the Protocol Wiki! Before you open a PR, make sure to read information for contributors and take a look at following checklist: