How to Find and Prevent Entire Classes of Security Vulnerabilities

Explore effective techniques for identifying and preventing entire classes of security vulnerabilities in this 34-minute conference talk. Delve into real-world examples, including CVE-2017-8046, and learn about variant analysis, code navigation, and IDE usage for enhanced security. Discover automated approaches to variant analysis, with a focus on the Chakra engine and the Zip Slip vulnerability. Gain insights into what variant analysis is not and recap key takeaways for improving your security practices.