`
Security @ Mozilla
Minion
Making Security Accessible for Developers
Minion Team
- Stefan Arentz
- Yeuk Hon Wong
- Matthew Fuller
- Security Assurance @ Mozilla
Security Automation Framework
- Wraps tools
- Collaboration and sharing of data
- Configurable Scanning Platform
- Open Source
Goals
- Automating Security Tools
- View and store test results
- Designed for everyone
Mozilla Principles
4. Individuals’ security on the Internet is fundamental and cannot be treated as optional.
The Problem
- Testing is hard
- Much of testing is grunt work
- Testing is not easily repeatable
- Writing tests is harder than doing them
The Mission
- Build a tool that works for us
- Make it work for anyone
- Give it away
- Low barrier to entry for contributions
Securing Mozilla
Architecture Overview
- Front End - Angular.js + Minion API
- Back End - Celery + Twisted
- Plugins
- Designed for everyone
Securing Mozilla
Tool Wrapper Model
- Python Wrapper code for tools
- Basic API required
- Lots of flexibility
- Designed for Scaling
Looking at a basic plugin
Securing Mozilla
Minion Vision
- Integration of Free Tools
- Correlation Engine
- Continous Integration
- Static Analysis
- 3rd Party Integration
Questions?
- Yvan Boily
- @ygjb
- yboily@mozilla.com