Google makes lemons out of lemonade
OK, so I got it backwards, sounded good anyway. Actually, Google continues to make security news by announcing a new automated tool they have developed (imagine that, a large company developing their own tools and not just innovation via acquisition. How long will Google keep that up?) called Lemon. Actually according to this story in the Register. Lemon is based on common fuzzing technology is primarily used to uncover application vulnerabilities like cross-site scripting (XSS) flaws.
Google will use the tool initially for their own security and plans are unclear as to whether or not they will release it for general use. Pretty cool. One mistake in the Register article is they compare Lemon to tools like Nessus, eEye Retina and Foundstone. Sounds to me more like tools from White Hat Security and that crowd.
In any event Google and security increasingly look perfect together.



Comments