Static Security Analysis for Elixir Code - Detecting and Preventing Vulnerabilities

Explore a conference talk from ElixirConf EU that delves into the critical aspects of security validation in BEAM-based systems, challenging the 'let it crash' principle. Learn about the EEF's secure coding principles and discover how static analysis can identify security vulnerabilities in both new and legacy Erlang/Elixir systems. Follow along as the speakers demonstrate a successful DoS attack on widely-used Erlang software, examine the challenges of applying static analysis frameworks to Elixir programs, and review real-world vulnerabilities found in open-source Elixir projects. Gain practical insights into implementing security checks and understanding the importance of input validation in creating robust Elixir applications.