What Are the Critical Security Flaws in My System?
summary
Presents an algorithm that prioritizes vulnerabilities by detecting execution paths where untrusted input reaches risky Erlang/OTP functions without meaningful validation, combining higher-order data-flow analysis with control-flow pruning to walk backwards from sink to source and recognize non-trivial pattern/guard checks. Implements an extended analyzer prototype available on GitHub, labels findings critical or warning, and reports early evaluation with about ~2% runtime overhead on a nontrivial codebase.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 4:06Security Flows
- 6:46Criticality
- 7:45Input Validation
- 8:36Prioritization
- 15:15Example
- 19:11Extended trojan analyzer
- 20:14Conclusion
related talks
32mDon’t let it crash: How we applied our security checks on Elixir code
18mSecuring Erlang and Elixir applications
22mWhen is a vulnerability not a vulnerability? Overcoming the...
34mHow To Find And Prevent Entire Classes Of Security Vulnerabilities
38mEffective Usage Analysis: Boosting Developer Productivity Via Innovative, Noise-reduced Vulnerability Analysis
01h 03m“Secure Coding Best Practices: Your First Line Is The Last Line Of Defense (2 of 2)”
45mEradicating Vulnerability Classes by Shelving SAST and Embracing Secure Defaults and Invariants
35mStrangerDanger: Finding Security Vulnerabilities Before They Find You!