<div dir="ltr">Thanks Marc, great start! Pattern based generator might be more effective than random, but having it configurable is great. Thanks!</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Feb 14, 2014 at 12:29 AM, Koderer, Marc <span dir="ltr"><<a href="mailto:m.koderer@telekom.de" target="_blank">m.koderer@telekom.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="DE" link="blue" vlink="purple"><div><p class="MsoNormal"><span lang="EN-US">Hi folks,<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">I wanted to discuss the blueprint in the QA meeting before opening it.<u></u><u></u></span></p><p class="MsoNormal">
<span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">Here it is:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><a href="https://blueprints.launchpad.net/tempest/+spec/fuzzy-test" target="_blank">https://blueprints.launchpad.net/tempest/+spec/fuzzy-test</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">I will collect work items in Etherpad during the day: <u></u><u></u></span></p><p class="MsoNormal"><a href="https://etherpad.openstack.org/p/bp_fuzzy_test" target="_blank"><span lang="EN-US">https://etherpad.openstack.org/p/bp_fuzzy_test</span></a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><span lang="EN-US">GSoC sound awesome, pls keep me updated on that.<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Don’t hesitate to contact me directly on IRC (freenode / mkoderer)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">I am already working on the first patch that allows multiple record generators. My plan is to allow make it configurable whether it’s simply a random generator or a pattern based generator.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">Regards<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Marc <u></u><u></u></span></p><p class="MsoNormal">
<span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"><div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm"><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Von:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Sriram Subramanian [mailto:<a href="mailto:sriram@sriramhere.com" target="_blank">sriram@sriramhere.com</a>] <br>
<b>Gesendet:</b> Freitag, 14. Februar 2014 08:51<br><b>An:</b> Bryan D. Payne<br><b>Cc:</b> Koderer, Marc; <a href="mailto:openstack-security@lists.openstack.org" target="_blank">openstack-security@lists.openstack.org</a>; <a href="mailto:dkranz@redhat.com" target="_blank">dkranz@redhat.com</a><br>
<b>Betreff:</b> Re: [Openstack-security] Fuzzy test framework in Tempest<u></u><u></u></span></p></div></div><div><div class="h5"><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal">FYI: I felt fuzzing could be an interesting project for <a href="https://wiki.openstack.org/wiki/GSoC2014#Mentors" target="_blank">GSoC</a>, so proposed it as one of the project ideas. I am not sure how many of those projects would get selected; in case it gets selected, hey, we get an intern!<u></u><u></u></p>
<div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Marc - would look for your bp! <u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Thanks!<u></u><u></u></p>
</div></div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p><div><p class="MsoNormal">On Thu, Feb 13, 2014 at 11:43 PM, Sriram Subramanian <<a href="mailto:sriram@sriramhere.com" target="_blank">sriram@sriramhere.com</a>> wrote:<u></u><u></u></p>
<div><p class="MsoNormal">Thanks Bryan!<u></u><u></u></p></div><div><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p><div><p class="MsoNormal">On Thu, Feb 13, 2014 at 9:35 PM, Bryan D. Payne <<a href="mailto:bdpayne@acm.org" target="_blank">bdpayne@acm.org</a>> wrote:<u></u><u></u></p>
<div><p class="MsoNormal">We left it with Marc needing to take the next step, which will be to put together a blueprint for this. Once he has that in place, he'll let OSSG know and we can help him drive it forward.<u></u><u></u></p>
<div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Marc, please let us know if I missed something.<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">
Cheers,<u></u><u></u></p></div><div><p class="MsoNormal">-bryan<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div></div><div><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div><p class="MsoNormal">On Thu, Feb 13, 2014 at 8:08 PM, Sriram Subramanian <<a href="mailto:sriram@sriramhere.com" target="_blank">sriram@sriramhere.com</a>> wrote:<u></u><u></u></p><div><p class="MsoNormal">Bryan/ Marc,<u></u><u></u></p>
<div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Apologies I missed the OSSG meeting. Looks like this was discussed last week, but I didn't see any action items or updates in the logs. Could one of you update please?<u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">thanks,<u></u><u></u></p></div><div><p class="MsoNormal">-Sriram<u></u><u></u></p></div></div><div><div><div><p class="MsoNormal" style="margin-bottom:12.0pt">
<u></u> <u></u></p><div><p class="MsoNormal">On Wed, Feb 5, 2014 at 9:57 AM, Bryan D. Payne <<a href="mailto:bdpayne@acm.org" target="_blank">bdpayne@acm.org</a>> wrote:<u></u><u></u></p><div><p class="MsoNormal">Marc,<u></u><u></u></p>
<div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">This is certainly of interest to OSSG. There were some people talking about doing security testing before the last summit, but I haven't heard much about that recently. Please do join us for the meeting tomorrow and we can discuss in some more detail. I'll see if I can encourage the other parties to participate as well.<u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Cheers,<u></u><u></u></p></div><div><p class="MsoNormal">-bryan<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div>
<div><p class="MsoNormal"><u></u> <u></u></p></div></div><div><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p><div><p class="MsoNormal">On Wed, Feb 5, 2014 at 6:54 AM, Koderer, Marc <<a href="mailto:m.koderer@telekom.de" target="_blank">m.koderer@telekom.de</a>> wrote:<u></u><u></u></p>
<p class="MsoNormal">Hello Security Team,<br><br>David and I are currently working on an automated framework for negative<br>testing in Tempest. This frameworks generates tests out of json schema<br>definitions (see <a href="https://review.openstack.org/#/c/64733/" target="_blank">https://review.openstack.org/#/c/64733/</a> and<br>
<a href="https://blueprints.launchpad.net/tempest/+spec/negative-tests" target="_blank">https://blueprints.launchpad.net/tempest/+spec/negative-tests</a>).<br><br>During discussion we came to the idea that it would be quite easy to build a<br>
security fuzzy test framework out of existing pieces in Tempest. If we'd run<br>the negative tests in our stress test framework that launches a certain number<br>of concurrent worker processes. At the end of a run we could use Tempest again<br>
to validate that all services are up and running.<br><br>Is this topic potentially interesting for this group?<br>I saw on your launchpad task board that your are planning something similar:<br> "Develop stress tests that can be integrated with current testing"<br>
Did somebody already spend some effort in that area?<br><br>I'd like to join your meeting tomorrow and discuss about it.<br><br>Regards<br>Marc<br><br>DEUTSCHE TELEKOM AG<br>Digital Business Unit, Cloud Services (P&I)<br>
Marc Koderer<br>Cloud Technology Software Developer<br>T-Online-Allee 1, 64211 Darmstadt<br>E-Mail: <a href="mailto:m.koderer@telekom.de" target="_blank">m.koderer@telekom.de</a><br><a href="http://www.telekom.com" target="_blank">www.telekom.com</a><br>
<br>LIFE IS FOR SHARING.<br><br>DEUTSCHE TELEKOM AG<br>Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman)<br>Board of Management: René Obermann (Chairman),<br>Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges,<br>
Dr. Thomas Kremer, Claudia Nemat, Prof. Dr. Marion Schick<br>Commercial register: Amtsgericht Bonn HRB 6794<br>Registered office: Bonn<br><br>BIG CHANGES START SMALL – CONSERVE RESOURCES BY NOT PRINTING EVERY E-MAIL.<br>_______________________________________________<br>
Openstack-security mailing list<br><a href="mailto:Openstack-security@lists.openstack.org" target="_blank">Openstack-security@lists.openstack.org</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a><u></u><u></u></p>
</div><p class="MsoNormal"><u></u> <u></u></p></div></div></div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>_______________________________________________<br>Openstack-security mailing list<br><a href="mailto:Openstack-security@lists.openstack.org" target="_blank">Openstack-security@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a><u></u><u></u></p></div><p class="MsoNormal"><br><br clear="all">
<u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div></div></div><p class="MsoNormal"><span style="color:#888888">-- <u></u><u></u></span></p><div><p class="MsoNormal"><span style="color:#888888">Thanks,<u></u><u></u></span></p>
</div><div><p class="MsoNormal"><span style="color:#888888">-Sriram<u></u><u></u></span></p></div></div></div><p class="MsoNormal"><u></u> <u></u></p></div></div></div></div><p class="MsoNormal"><br><br clear="all"><u></u><u></u></p>
<div><p class="MsoNormal"><u></u> <u></u></p></div></div></div><p class="MsoNormal"><span><span style="color:#888888">-- <u></u><u></u></span></span></p><div><p class="MsoNormal"><span style="color:#888888">Thanks,</span><u></u><u></u></p>
</div><div><p class="MsoNormal"><span style="color:#888888">-Sriram<u></u><u></u></span></p></div></div></div><p class="MsoNormal"><br><br clear="all"><u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div><p class="MsoNormal">
-- <u></u><u></u></p><div><p class="MsoNormal">Thanks,<u></u><u></u></p></div><div><p class="MsoNormal">-Sriram<u></u><u></u></p></div></div></div></div></div></div></div></blockquote></div><br><br clear="all"><div><br></div>
-- <br><div>Thanks,</div><div>-Sriram</div>
</div>