How to Find and Prevent Entire Classes of Security Vulnerabilities

How to Find and Prevent Entire Classes of Security Vulnerabilities

Explore effective techniques for identifying and preventing entire classes of security vulnerabilities in this 34-minute conference talk. Delve into real-world examples, including CVE-2017-8046, and learn about variant analysis, code navigation, and IDE usage for enhanced security. Discover automated approaches to variant analysis, with a focus on the Chakra engine and the Zip Slip vulnerability. Gain insights into what variant analysis is not and recap key takeaways for improving your security practices.