Jump to: navigation, search

GSoC2014/Student/Manishanker

< GSoC2014
Revision as of 13:44, 16 March 2014 by Talusani Mani Shanker (talk | contribs) (Created page with "'''Personal Details''' Name : Manishanker Talusani<br /> Email : shanker.mani0@gmail.com<br /> Name of the University: Birla Institute of Technology & Science Pilani - K.K.Bi...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Personal Details

Name : Manishanker Talusani
Email : shanker.mani0@gmail.com
Name of the University: Birla Institute of Technology & Science Pilani - K.K.Birla Goa Campus,Goa,India
Education : Master Of Science (Technology)
IRC nickname[freenode] : Manishanker
Other contact methods (mobile no) : (+91) 9503395344

Project Description

Project Idea url : https://wiki.openstack.org/wiki/GSoC2014/Testing/Fuzz

Project Goals :

  • Design and Implement Fuzz testing framework that can fuzz OpenStack APIs by generating configurable combninarions (random or pattern based)
  • Integrate above fuzz test framework with OpenStack Tempest test framework
  • Enable fuzz testing on at least one OpenStack project (OpenStack Nova for example)

Project Plan

  • Task 1:
  Designing a framework prefarably with a user interface , application and database.Inputs to the framework can be given using command line or through a interface .User interface is used to give inputs (random or pattern based ) to the framework which can be automated or semi-automated.According to the input given to the framework, application then makes Openstack API calls. Framework is then used to monitor the output of the API calls and it is also used to check if there were any crashes ,Bugs, Security vulnerbilities. The result of the input is compared with the actual output whose information  is already stored in the database.If there were any crashes then the input is stored in the database as a succesful fuzzer. Several combinations of the fuzzer are formed from previous fuzzer which are again fed to the framework and monitored. Among all the fuzz testing techniques available ,depending on the bugs ,crashes ocurred ,based on the information on inputs stored in database best fuzzing technique will be used in the application of the framework.
  • Task 2:
  Integrating the above framework into the Tempest framework in Openstack.This requires a lot of understanding of how two frameworks can be integrated. My primary focus would be to build the Fuzzing framework in such a way that it can be extensible as well as it can be integrated to Tempest with few integration problems.
  • Task3 :
  Extending Fuzz testing framework for atleast one Openstack project.Also enabling automated reporting of security vulnerabilities to Openstack Security Group.

How will i achieve these goals: <To be filled after discussing with mentor>

What are my milestones

  • My first milestone would be designing the framework since it should be extensible to other Openstack services and it should be integrated to Tempest with less integration errors.
  • Second milestone would be, after the implementation of the framework is done ,selecting the best fuzzing technique and building the application in framework with it.
  • Third milestone would be, after the application building in framework is done , enabling it on one of the openstack service .This requires in depth understanding of the service since the automation of the fuzzing framework and protocol creation for inputs totally depend on the particular service.

Project Timeline <To be filled after discussing with mentor>

Technical Background

  • Open Source contribution
   I haven't contributed to open source but i want to start my contribution to open source through Openstack.
  • Academic background
   I am an Undergraduate student pursuing MSC.(Tech.) Information Systems at BITS Pilani K K Birla Goa Campus.Currently i am working as an intern.I have been working on Openstack for couple of months and i am involved  in deployment of Openstack services in the Data center. I am responsible for deployment of multi-hypervisor cloud which is used to test different products of the company and fixing errors for the other teams who are using the Openstack services.I am also responsible for Baremetal and Ironic deployment which are currently in progress.Prior to this i have worked on different projects in Android ,Hadoop, Matlab
  • Programming language
   C,Java,Python