For our February meetup we have a hands-on workshop with ShiftLeft's Vickie Li! Bring your laptop.
Speaker: Vickie Li, Developer Evangelist at ShiftLeft
Title: Analyzing source code for vulnerabilities: A how-to workshop
Abstract:
Writing code is hard. Writing secure code is even harder. Serious security vulnerabilities often stem from small programming mistakes. As developers, we can safeguard our applications by catching these mistakes in our own code.
Performing a source code review is one of the best ways to find security issues in code. But how do you do it? In this workshop, we will first go through the basics of how to review your code for vulnerabilities and some tactics for performing an effective security code review on your application.
But the process of manually analyzing code for vulnerabilities can be very time-consuming. In the second part of this talk, we will also talk about how to use the interactive code analysis tool Joern to make code analysis more efficient. How do you effectively trace user input in code? How can you efficiently link bug sources to sensitive sink functions?
