Static Analysis of Julia Code
Explore static analysis tools for Julia code to enhance quality, maintainability, and performance. Learn about Lint.jl, StaticLint.jl, JuliaFormatter.jl, and CodeTracking.jl for improved code development.
Implement Auto Instrumentation Under GraalVM Static Compilation on OTel Java Agent
Explore GraalVM static compilation's impact on Java applications and learn about a static instrumentation solution for OTel Java Agent, enhancing performance in cloud-native environments.
Developing an IDE for Clojure Code - Cursive
Explore Cursive, an IntelliJ-based IDE for Clojure using static analysis. Learn about unique features, challenges, and future plans for enhancing Clojure development workflows.
Lineage Quality Measurement for Privacy Engineering
Exploring a framework for measuring lineage performance in data systems, aiding product teams and privacy engineers in selecting effective approaches for privacy protection.
Balancing Analysis Time and Bug Detection: Daily Development-friendly Bug Detection in Linux
Explore FiTx, a framework for fast, daily bug detection in Linux. Learn how it balances analysis time and bug-finding capabilities, outperforming existing tools in speed and effectiveness.
LLVM Improvements for Better Verification
Explore LLVM enhancements that facilitate improved code verification, focusing on techniques and strategies for more robust software development.
Finding Vulnerabilities through Static Analysis and Scripting
Discover critical vulnerabilities through reverse engineering and static analysis. Learn to set up a build environment and explore real-world examples in this inspiring session on bug hunting techniques.
An Opinionated Overview on Static Analysis for Java
Explore diverse applications of whole-program points-to analysis in Java, addressing challenges like reflection and JNI. Learn how GraalVM Native Image handles dynamic features without sacrificing precision.
Pants Build System: A Python Development and Deployment Tool Like Cargo
Discover how Pants build system revolutionizes Python development by automating dependency management, testing, and deployment - similar to Rust's Cargo, enabling efficient handling of large codebases and microservices.
Scaling Structured Concurrency with Async Python
Discover how to leverage async Python for structured concurrency, exploring error handling, timeouts, and cancellation while learning to write elegant concurrent code using tools like flake8-trio and dynamic analysis.
Bridging the Gap for Security Analysis in Infer
Explore advancements in Infer's static analysis for enhanced security vulnerability detection, with proposed improvements and implementation strategies for expanded property coverage.
Code Analysis ++
Explore C++ static analyzers, Core Guidelines enforcements, and language simplification trends. Discuss toolability aspects and adoption of technology-specific analysis like MISRA and AUTOSAR.
Zen and the Art of Code Life Cycle Maintenance
Explore software quality through tests, types, and analysis, drawing parallels to "Zen and the Art of Motorcycle Maintenance" to uncover key aspects and their interplay.
How Not to Choke on a Big Old Project
Discover effective strategies for managing large legacy C++ projects, exploring DevSecOps, static and dynamic analysis, and quality control platforms to enhance code quality and security.
Hunting Trojans with AST Transformers and Machine Learning
Discover advanced techniques for detecting malicious Python projects using AST Transformers and machine learning, focusing on obfuscation methods and countermeasures in cybersecurity.
Security Tooling Space - Latest Developments and Innovations
Explore the latest developments and innovations in blockchain security tooling, focusing on emerging threats, defensive strategies, and cutting-edge solutions for smart contract protection.
New Isn't Always Novel - Finding Basic Vulnerabilities in Enterprise Software
Discover how basic vulnerabilities in enterprise software led to a successful Pwn2Own contest entry, featuring a command injection exploit in Lexmark printers and practical security insights.
Automated Static Analysis Warning Resolution Using Software Bots - A Sorald Demo
Discover how to automate fixing SonarQube violations using Sorald, a software bot that monitors GitHub repositories and submits patches through pull requests, streamlining code maintenance.
С Какого Конца Начинать Безопасную Разработку - Инструменты и Подходы
Узнайте эффективные подходы к внедрению безопасной разработки, включая анализ инструментов сканирования уязвимостей и практические рекомендации по их интеграции в процесс разработки.
Coccinelle for Rust
Explore Coccinelle's application in Rust programming, focusing on code analysis and transformation techniques for improved software development.
Enhancing Spatial Safety: Fixing Thousands of -Wflex-array-member-not-at-end Warnings
Aprenda a corrigir avisos de -Wflex-array-member-not-at-end para melhorar a segurança espacial em sistemas Linux.