The Open Source Fortress: Finding Vulnerabilities in Your Codebase Using...

AppSec Village welcomes all travelers to choose from talks by expert community members, an all AppSec-focused CTF, contests that challenge your mind and your skillz, and more. Bring your thirst for knowledge and passion for breaking things, and your visit to AppSec Village will be a thrill!

AppSec Village

AppSec Village @ DEFCON WORKSHOP (DEFCON BADGE REQUIRED)

Las Vegas Convention Center, West Hall, Level 2, Rooms 228-230

To make sure more villagers get to attend our awesome AppSec Village workshop. Please limit yourself to no more than two workshops out of the five we offer. We will randomly cancel registrations of registrants going over this limit. Thank you for making it fun for everyone!If you see that you won't arrive at the workshop, please cancel. Someone on the waiting list will really appreciate it!----- <ul><li>Must have a valid DEFCON badge to attend.</li><li>Must be present for event 10 min before scheduled beginning time.</li><li>Participants must agree to AppSec Village &amp; DEFCON Codes of Conduct</li></ul> Regardless of where it is hosted, a codebase could end up in the hands of malicious actors. Aside from the open source scenario, attackers may utilize sophisticated techniques to access and download it. An example is Okta's 2022 breach, in which the source code of the identity and access management platform was obtained from GitHub.Developers are advised to adopt a shift-left approach, uncovering as many code flaws as possible before releasing it to the public."The Open Source Fortress" will provide a framework for detecting vulnerabilities in codebases with open-source tools. The examples imply the discovery of vulnerabilities in a custom, purposefully vulnerable codebase written in C and Python. Static techniques such as symbolic execution, secret scanning, code querying, and dependency scanning will be discussed, as will dynamic techniques such as fuzzing.iosifacheSecurity Engineer @ Snap Inc. Andrei spent 2022 as a technical leader for a start-up that specialises in automating cybersecurity solutions, as well as being a security engineer in the Romanian Army. After determining that the start-up idea was unviable, he left the public sector and accepted a position at Canonical, working to secure Ubuntu and its open-source components.Subsequently, he relocated to Switzerland and joined Snap Inc., where he helps make Snapchat a safer platform for our users, free from spam and abuse.Andrei's current focus is on software security. He has recently contributed to the open-source space and provided advice to start-ups on cybersecurity matters. <a href="https://appsecvillage.com/events/dc-2024/the-open-source-fortress-finding-vulnerabilities-in-your-codebase-using-open-source-tools-677630" title="https://appsecvillage.com/events/dc-2024/the-open-source-fortress-finding-vulnerabilities-in-your-codebase-using-open-source-tools-677630" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://appsecvillage.com/events/dc-2024/the-open-source-fortress-finding-vulnerabilities-in-your-codebase-using-open-source-tools-677630</a>

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

The Open Source Fortress: Finding Vulnerabilities in Your Codebase Using...

More events from AppSec Village

Discover more events from AppSec Village, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.

The Open Source Fortress: Finding Vulnerabilities in Your Codebase Using...

More events from AppSec Village

Discover more events from AppSec Village, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.