OWASP Vancouver - CodeQL for Vulnerability Research

We are excited to go back to in-person events and enhance member experience through face-to-face interactions. Please see COVID safety information below.

6:00-6:10pm: networking, eating, drinking, getting ready.

6:10-7:10pm: CodeQL for Vulnerability Research with Ethan Willoner
CodeQL provides a powerful static analysis toolkit for researchers and engineers to discover vulnerabilities in their codebases. By transforming code into a database that can be queried we can not only find vulnerable code but trace the execution flow that triggers it. In this talk, we will familiarize the audience with the basics of CodeQL and use this to hunt for deserialization vulnerabilities in .NET.
Speaker: Ethan Willoner is currently an application security researcher at Microsoft with a focus on M365 and formerly a software engineer developing network security product.

7:10-8:00pm: "State of the SAST" unconference style discussion

***
Pandemic safety: all participants will be seated 2 meters apart. Masks encouraged.
Thank yous: we would like to give big thanks to Forward Security for hosting and feeding us, and all the volunteers for helping make this happen!
OWASP Vancouver web site can be found here, where you can find more info and stay connected with us.