Application Security in an Agile SDLC
Explore integrating application security into Agile development, covering key concepts, tools, and real-world examples for creating secure software efficiently.
Biting the Apple that Feeds You - macOS Kernel Fuzzing
Explore macOS kernel fuzzing techniques to identify critical flaws, including automated testing, targeted fuzzing, and in-memory fuzzing for improved code coverage and efficiency.
PHP Reviews for Busy People
Discover efficient PHP code review techniques using automated tools to maintain code quality, identify issues early, and improve team collaboration without time constraints.
Practical Advanced Static Analysis
Explore advanced static analysis tools for PHP, learn to integrate them into workflows, and optimize code for better bug detection and improved evolvability.
Testing Complex Applications for PHP7
Comprehensive guide to testing large PHP applications, covering tools like PHPUnit, GDB, and ValGrind. Explores strategies for upgrading to PHP7 and ensuring application stability.
Static Analysis Saved My Code Tonight
Explore static analysis tools for PHP, their benefits in code review, and integration into development cycles. Learn about AST, security checks, and migration compatibility.
The Bug Hunter's Methodology - Application Analysis
Discover advanced techniques for application analysis in bug hunting with insights from a top-ranked researcher. Learn recon strategies and web app vulnerabilities to enhance your ethical hacking skills.
Augmenting Static Analysis Using Pintool - Ablation
Extracts runtime information to enhance static analysis, resolving virtual calls in C++ binaries and visually comparing samples for efficient vulnerability research and code auditing.
Automated Black-box Security Testing of Smart Embedded Devices
Innovative approach for IoT black-box fuzzing using "fuzzing triggers" from companion apps to generate optimal inputs, overcoming limitations of existing tools and discovering zero-day vulnerabilities.
Vaccinating Android
Explore Android security, decompilation, and analysis techniques. Learn about APK tools, dynamic and static analyses, and hacking challenges in this comprehensive mobile security talk.
Migrating to Modules
Live-coding demonstration of migrating a Java 8 application to Java 9 modules, showcasing Project Jigsaw's flexibility in allowing gradual adoption of the modular system while maintaining compatibility with non-modularized libraries.
SyzDescribe - Principled, Automated, Static Generation of Syscall Descriptions for Kernel Drivers
Automated generation of syscall descriptions for kernel drivers using SyzDescribe, enhancing security testing efficiency and coverage for operating system kernels.
Extending the PHP Language with Static Analysis
Discover how to enhance PHP's capabilities using static analysis, including implementing new language features and creating custom PHPStan rules for advanced developers.
The Quest for Dynamic Language Performance on the JVM - Nashorn War Stories
Explore performance challenges and solutions for JavaScript on the JVM with Nashorn, covering type specialization, optimization techniques, and JVM enhancements for improved dynamic language support.
Disrupting QA - Emerging Trends in Code Quality Automation
Explores emerging trends in code quality automation, focusing on static analysis advancements, machine learning integration, and scalability improvements for modern agile development processes.
Streamlining Large-Scale Java Development Using Error Prone
Explore Error Prone and Refaster for automated Java code refactoring, bug detection, and pattern enforcement. Learn to streamline large-scale development and take control of your codebase efficiently.
Attacking Software Tokens
Exploring vulnerabilities in software OTP tokens, demonstrating reverse engineering techniques and exploits for major vendors' tokens, and assessing obfuscation effectiveness.
Reverse Engineering Windows Malware 101 Workshop
Hands-on workshop introducing reverse engineering fundamentals for Windows malware analysis. Learn to set analysis goals, use tools, and apply computer science concepts through practical exercises.
How the BIOS Assures Its Handling of Inputs
Explore BIOS input handling, firmware interfaces, and analysis techniques for formal validation and vulnerability detection, including static, dynamic, and symbolic execution approaches.
DynPTA: Combining Static and Dynamic Analysis for Practical Selective Data Protection
Explore innovative techniques combining static and dynamic analysis for enhanced data protection, offering practical insights into selective security measures.
The Art of Deleting Code
Discover techniques for identifying and safely removing obsolete code in large Ruby projects, including git commands, static analysis, and effective PR strategies for code deletion.