Learning/testing the framework: Where is 'sydr.zip'? about oss-sydr-fuzz

[SweetVishnya]

Sydr-Fuzz is a proprietary software. However, you may fuzz directly via libFuzzer or AFL++ (arguments are listed in TOML files). Also, crash triaging tool Casr is open source.

[program-learner-1]

Is Sydr-Fuzz the result of academic research?

[SweetVishnya]

Yeah, it has a dedicated paper, demo, and slides.

[program-learner-1]

Yeah, it has a dedicated paper, demo and slides.

So why is it proprietary software and not open source software?

This prevents it from being studied and possibly improved.

[SweetVishnya]

Because it is distributed via commercial license. However, you may still use casr-afl that is open source.

[program-learner-1]

First draft of the UNESCO Recommendation on Open Science

[...]

9. For the purposes of this Recommendation, 'Open Science' means a complex of at
   least the following key elements:

[...]

(iii) Open Source/Software and Open Hardware: open software describes software
that is publicly available under an open license that grants others the right to
access, modify, expand, study, create derivative works, use and/or share the
software and its source code, design, or blueprint. The source code must be
included in the software release or made available upon request and the chosen
license must allow modifications, derived works, and sharing under equal
conditions. [...]

(https://unesdoc.unesco.org/ark:/48223/pf0000374837)