Главная
Study mode:
on
1
intro
2
jons background
3
what were going to talk about
4
what i tried
5
reading line by line
6
finding vulnerabilities
7
looking for inspiration
8
playing a game
9
C magic
10
C magic fails
11
Code parsing
12
Abstract syntax trees
13
Control flow graph
14
Statespace search
15
Depthfirst search
16
Depthsecond search
17
completeness
18
AI
19
StackTrace
20
Live Demo
21
Static Code Analysis
22
Parallelization
23
Native code
24
Security Metric
25
Unicode Conversion
26
Another example
27
regression testing
28
caveats
29
what next
Description:
Explore strategies for efficiently reviewing large codebases in this 33-minute OWASP Foundation conference talk. Discover the speaker's approach to analyzing 2.6 million lines of code on-site, including experiments conducted and unexpected challenges encountered. Learn about various techniques such as line-by-line reading, vulnerability identification, code parsing, abstract syntax trees, control flow graphs, and state space search algorithms. Gain insights into static code analysis, parallelization, native code handling, security metrics, and Unicode conversion. Consider the limitations and future directions for improving code review processes in large-scale software projects.

Adventures in Reviewing Mountains of Code

OWASP Foundation
Add to list