Using Safety Properties to Generate Vulnerability Patches
Innovative approach to automatic program repair using safety properties for precise and complete vulnerability fixes, demonstrated on 32 real-world vulnerabilities across diverse applications.
Using Safety Properties to Generate Vulnerability Patches
Explores a novel approach to automatic program repair using safety properties to generate precise and comprehensive vulnerability patches, avoiding limitations of example-based methods.
SoK - Practical Foundations for Software Spectre Defenses
Explore practical foundations for software Spectre defenses, covering key strategies and techniques to mitigate this critical security vulnerability in modern processors.
Hardware-Software Contracts for Secure Speculation
Explore secure speculation techniques through hardware-software contracts, enhancing system security and performance in modern computing architectures.
Software Bill of Materials and Supply Chain with the Yocto Project
Explore software supply chain security using the Yocto Project, focusing on generating and utilizing Software Bill of Materials (SBOM) for enhanced transparency and risk management.
Building Native Extensions - This Could Take A While
Explore techniques for building native gem versions, improving installation speed and reliability. Learn about toolchains, trust considerations, and deploying pre-compiled packages.
Jumping the Fence - Comparison and Improvements for Existing Jump Oriented Programming Tools
Explore Jump Oriented Programming, comparing tools and discussing improvements. Covers gadget search, comprehension strategies, and architecture support for various platforms including ARM and AVR.
Quantifying Risk in Consumer Software at Scale - Consumer Reports' Digital Standard
Explore methodologies for quantifying software security risks, predicting vulnerabilities, and evaluating consumer products using the Digital Standard developed by Consumer Reports and CITL.
Epidemiology of Software Vulnerabilities - A Study of Attack Surface Spread
Explore the impact of third-party libraries on software vulnerabilities, analyzing their spread across products and discussing strategies to mitigate risks in application development.
The Info Leak Era on Software Exploitation
Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.
Digging Deep Into the Flash Sandboxes
Explore Flash Player sandbox implementations, their architectures, mechanisms, and security limitations. Learn about potential vulnerabilities and sandbox escape techniques in this in-depth analysis.
Mission mPOSsible
Explore vulnerabilities in mobile payment systems, including code execution through various input vectors. Live demonstrations showcase attack methods, emphasizing security weaknesses in current mPOS solutions.
Clonewise - Automated Package Clone Detection
Automated system for detecting embedded code vulnerabilities in software packages. Uses machine learning to identify package clones, improving security tracking for Linux vendors like Debian and Red Hat.
Embarking on Your Security Journey
Interactive journey exploring best practices for building and managing secure software systems, offering concrete tips, field stories, and strategies to make security scalable and approachable for organizations.
Adapting DevOps in a World of Growing Software Supply Chain Attacks
Explore DevSecOps strategies to combat rising software supply chain attacks. Learn about vulnerabilities, prevention techniques, and essential rules for securing your development pipeline.
Expert Talk - Software Security
Expert discussion on the evolving role of developers in software security, offering insights on improving security practices, cloud security, design challenges, and continuous learning for better application security.
NPM and Sigstore - Provenance Comes to the World's Largest OSS Ecosystem
Explore GitHub's efforts to secure the Javascript ecosystem through provenance integration and Sigstore partnership, enhancing npm's security against malware and supply chain attacks.
Wargames - Java Vulnerabilities and Why You Should Care
Explore Java security vulnerabilities, understand related acronyms, and learn about tools to check for known issues in your applications. Gain insights into making Java more secure.
Software Security
Insightful discussion on the evolving role of security in software development, emphasizing the shift towards developer responsibility and strategies for making informed security decisions.
SLSA, SigStore, SBOM & Software Supply Chain Security - What Does It All Mean?
Demystifying software supply chain security: SLSA, SigStore, and SBOM explained. Learn about tools and methodologies to secure software from development to production in this comprehensive overview.
Software Security Game Day
Explore software security practices through a sports analogy, covering roles, training, and ROI in vulnerability assessments and developer improvement.