How to Find and Prevent Entire Classes of Security Vulnerabilities

Offered By: OWASP Foundation via YouTube

Course Description

Overview

Explore effective techniques for identifying and preventing entire classes of security vulnerabilities in this 34-minute conference talk. Delve into real-world examples, including CVE-2017-8046, and learn about variant analysis, code navigation, and IDE usage for enhanced security. Discover automated approaches to variant analysis, with a focus on the Chakra engine and the Zip Slip vulnerability. Gain insights into what variant analysis is not and recap key takeaways for improving your security practices.

Syllabus

Intro
A story of many bugs (CVE-2017-8046)
A story of many bugs 2
Variant Analysis?
Code Navigation / IDE
Automating Variant Analysis
An Example: Chakra
Zip Slip
What variant analysis is NOT
Recap

Taught by

OWASP Foundation

Related Courses

Computer Security
Stanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network