Presentation: Secure Programming with Static Analysis

Posted by Niclas Nilsson on Aug 06, 2008

Sections

Process & Practices,

Architecture & Design,

Development

Topics

Code Analysis ,

Profilers ,

Debugging ,

Architecture ,

Security ,

Static Analysis ,

Programming ,

Code Reviews

Share |

RELATED Research

Creating secure code is a hard thing to do. The number of things to get right is almost endless and the price for not succeeding can be extremely high.

In this talk, Brian Chess explains how static source code analysis can help finding the kinds of errors that leads to vulnerabilities and exploits. Highlights from the talk include:

• The most common security shortcuts and why they lead to security failures
• Why programmers are in the best position to get security right
• Where to look for security problems
• How static analysis helps
• The critical attributes and algorithms that make or break a static analysis tool
• How static analysis works and how to integrate it into the software development processes and security code reviews.

Along the way, Brian shows examples taken from real-world security incidents, showing how coding errors are exploited, how they could have been prevented, and how static analysis can rapidly uncover similar errors.

To learn more, spend the next hour on Brian’s presentation: Secure Programming with Static Analysis

RelatedVendorContent

The Agile Tester

Agile Practices to Improve Project Management Organization (PMO) Effectiveness

Troubleshoot Java/.NET performance while getting full visibility in production

Tutorial: Automating tests without compromising coverage of the environment

Combining Inspections, Static Analysis, Testing to Achieve >95% Defect Removal Efficiency

Related Sponsor

In today’s hyper-competitive world, later may be too late to adopt Agile development and this Roadmap for Success will help you get started. Download "Agile Development: A Manager's Roadmap for Success" now!

1. Back to top

   Video doesn't seem to work after approximately 30 mins

   by nik jan

   Nice presentation but couldn't watch all.

   Reply

2. Back to top

   Re: Video doesn't seem to work after approximately 30 mins

   by Cristi Buta

   I was able to watch the full presentation without any problem. Try dragging the progress indicator over the 30 mins and see what happens.

   Reply