Continuous Integration: Live Static Analysis Using Visual Studio and the Roslyn API
Explore live static analysis in Visual Studio using Roslyn API for secure coding. Learn to create custom rules, integrate secure code scanning, and enhance .NET application security.
QARK: Android App Exploit and Static Code Analysis Tool
Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.
Static Code Analysis of Complex PHP Application Vulnerabilities
Explore advanced static code analysis techniques for detecting complex PHP vulnerabilities, including first-order, second-order, and object injection issues.
Improving Penetration Testing Efficiency with OWASP Code Pulse and Attack Surface Detector
Explore OWASP tools for efficient web app penetration testing: Code Pulse for real-time code coverage and Attack Surface Detector for comprehensive endpoint discovery, enhancing security assessment capabilities.
Needle: Finding Issues within iOS Applications
Discover Needle, an open-source framework for streamlined iOS app security assessments. Learn about its modular architecture, capabilities, and how it simplifies vulnerability detection in iOS applications.
Quantifiable Quality - The New Standard of Secure Code
Explore innovative approaches to measure and enhance code security, focusing on quantifiable quality metrics for robust software development.
Writing a Language Server in OCaml for Emacs - Fun and Profit
Explore writing a language server in OCaml for Emacs, covering LSP basics, implementation tips, and integration with Emacs for enhanced coding experience and security analysis.
Detecting Malicious Dependencies at Scale with Static Analysis
Explore static analysis techniques for identifying malicious dependencies in open-source packages, including Semgrep rules and metadata analysis to enhance software supply chain security.
Data Flow Analysis in IntelliJ IDEA - How the IDE Perceives Your Code
Explore IntelliJ IDEA's data flow analysis engine, understanding how it detects code issues, handles abstract interpretation, and provides warnings to improve Java development efficiency.
Detecting Errors and Memory Leaks in C++ Code Using PVS-Studio
Learn to detect errors and memory leaks in C++ using PVS-Studio, a powerful static code analysis tool. Discover how to identify and fix common programming mistakes for more robust software development.
GitHub Copilot and Advanced Security - A Quick Tour
Explore GitHub Copilot's AI-powered development capabilities and GitHub Advanced Security's tools for identifying and fixing vulnerabilities, with live demonstrations and insights on enterprise applications.
10 Steps to Agile Development without Compromising Enterprise Security
Integrating security practices into Agile development: strategies for maintaining speed while ensuring robust protection in enterprise software development.
How to Optimize Your Code - Performance Improvement Techniques
Learn effective techniques for code optimization, including performance analysis, hardware considerations, profiling tools, and practical steps to enhance your software's efficiency.
The Static Check Needle in the Warnings Haystack
Techniques to efficiently identify and address new static check warnings in Linux kernel patches, improving code quality and submission process.
Predicting Dynamic Properties of Heap Allocations using Neural Networks Trained on Static Code
Explore neural network models predicting heap allocation properties from static code, examining trade-offs, promising directions, and challenges in this innovative approach to memory management.
Generative AI for Application Modernization with Konveyor AI - Demo and Introduction
Explore Konveyor AI's integration of generative AI and static code analysis for efficient Java EE to Quarkus migration, with a practical demo using the "coolstore" application.
DIY Static Code Analyzer - Building Your Own Security Tools with Joern
Learn to build custom security tools using Joern for static code analysis, enhancing your ability to detect vulnerabilities and improve software security.
A Close Look at Rogue Antivirus Programs
Comprehensive analysis of rogue security software, examining characteristics, behavioral patterns, and potential benefits. Explores methods to differentiate from legitimate antivirus programs and investigates the financial aspects behind these products.
Raining CVEs on WordPress Plugins with Semgrep
Leveraging Semgrep to identify vulnerabilities in WordPress plugins, reducing false positives, and automating XSS validation. Includes demos on custom rule creation and the XSSBomb tool.
Secure Product Lifecycle as a Service
Learn to design, implement, and scale a Secure Product Lifecycle (SPLC) program using automation and security ambassadors. Gain insights from Adobe's successful approach to integrating security into software development.
Test Driven Security in the DevOps Pipeline
Learn to implement Test Driven Security in DevOps, focusing on baseline controls, continuous testing, and preventing common vulnerabilities through specific, actionable security practices.