Skip to content

Commit 3630e9c

Browse files
Create README.md (#2382)
1 parent 3c3f5d0 commit 3630e9c

File tree

1 file changed

+33
-0
lines changed
  • contributions/presentation/week2/ghenn-vikfor

1 file changed

+33
-0
lines changed
Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
# Assignment Proposal
2+
3+
## Title
4+
5+
The Crowdstrike bug, and the importance of high-quality testing
6+
7+
## Names and KTH ID
8+
9+
- Gustav Henningsson ([email protected])
10+
- Viktor Fornstad ([email protected])
11+
12+
## Deadline
13+
14+
- Week 2
15+
16+
## Category
17+
18+
- Presentation
19+
20+
## Description
21+
22+
We want to take a look at the Crowdstrike bug that happened in July of this year.
23+
Crowdstrike is a company that sells anti-malware services, endpoint protection software, and threat-intelligence services.
24+
On the 19th of July 2024, a new version of one of their softwares caused over 8 million Windows computers to crash, due to a array out-of-bounds memory exception.
25+
This was not caught in any of the testing done by Crowdstrike prior to deployment. The tests used Regular Expressions, and wildcard matching that missed the oob-exception every time.
26+
Since the software in question is running in kernel level 0, this was catastrophic for the computer, and caused an system-wide crash.
27+
We will look at how the automated testing failed, aswell as what Crowdstrike have done(or could have done) to fix it.
28+
29+
**Relevance**
30+
31+
The bug in the update should have been caught by the automated testing Crowdstrike ran before deployment.
32+
However, due to the way that the tests were set up, this issue slipped through all tests and made it to live.
33+
This issue higlights the importance of not only having tests, but writing good tests. Just because your commit passes all tests does not mean that it's 100 procent safe.

0 commit comments

Comments
 (0)