Source Code Analysis Courses and Certifications

Learn With Jason

Build a Live Voting App

Learn to create an interactive live voting app using Appwrite. Explore database setup, vote submission, real-time updates, and more in this comprehensive tutorial.

• YouTube
• 1 hour 26 minutes
• On-Demand
• Free Video

Learn With Jason

Build Web Standards-Based Sites With Enhance

Explore Enhance, a lightweight framework for building flexible web applications using web standards. Learn its core concepts, elements, routing, and API integration through hands-on coding.

• YouTube
• 1 hour 30 minutes
• On-Demand
• Free Video

Black Hat

Over-the-Air - How We Remotely Compromised the Gateway, BCM, and Autopilot ECUs of Tesla Cars

Detailing Tesla car hacking techniques, including remote compromises of gateway, BCM, and Autopilot ECUs. Explores vulnerabilities, attack chains, and Tesla's security enhancements in response.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

NDC Conferences

Debugging One Layer Deeper

Explore advanced .NET debugging techniques, diving into native code and runtime internals to solve complex issues using tools like WinDBG and LLDB.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

NDC Conferences

Are Your Secrets Secure? How Mobile Applications Are Leaking Millions of Credentials

Explore how mobile apps leak sensitive credentials, analyzing real breaches, source code vulnerabilities, and Play Store security risks. Learn actionable steps to protect your app's secrets.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Code Aware Services for Vulnerability Detection - Welcome Back and Remarks

Explore Code Aware Services for complex software security. Learn about build tracing, source code processing, and tools for vulnerability detection in large-scale projects like Android Linux kernel.

• YouTube
• 45 minutes
• On-Demand
• Free Video

NDC Conferences

Analyzing Source Code Using Roslyn

Explore Roslyn's code analysis capabilities, including parsing, transforming, and pattern-checking C# code. Learn to create in-memory assemblies and run xUnit tests using Roslyn's powerful features.

• YouTube
• 1 hour 8 minutes
• On-Demand
• Conference Talk

Black Hat

Drop the ROP - Fine-Grained Control-Flow Integrity for the Linux Kernel

Explore fine-grained Control-Flow Integrity for Linux kernel security, addressing ROP attacks and dynamic kernel modules. Learn advanced mitigation techniques and implementation challenges.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Black Hat

Exploiting USB-IP in Linux

Explore USB/IP vulnerabilities in Linux, including buffer overflow and data injection. Learn about architecture, protocol, and security implications of this USB device sharing framework.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

The FOSSology Project - Open Source Software for License Compliance

Explore FOSSology, an open-source tool for license compliance in collaborative projects. Learn about its features, new technologies, and automation capabilities for efficient software management.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Matching CVEs and Source Code for Vulnerability Detection

Explore techniques for mapping CVEs to source code, including parsing CVE data and quantifying correspondence statistics. Learn about open-source tools and potential AI applications for vulnerability detection.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Is Linux Kernel Development Suitable for Safety-Critical Systems? - Progress and Methods

Explore Linux kernel development for safety-critical systems, examining methods to assess and improve its suitability for use in autonomous driving and other high-stakes applications.

• YouTube
• 41 minutes
• On-Demand
• Free Video

OWASP Foundation

The ABCs of Source-Assisted Web Application Penetration Testing

Learn advanced web application penetration testing techniques using source code analysis for improved vulnerability detection and assessment.

• YouTube
• 45 minutes
• On-Demand
• Free Video

OWASP Foundation

Improving the Security of Software Defined Infrastructures - AppSec EU 2017

Explore security challenges in Software Defined Infrastructures, learn attack surfaces, vulnerability identification techniques, and remediation strategies for configuration management tools like Puppet or Chef.

• YouTube
• 26 minutes
• On-Demand
• Free Video

The Cherno

Growth - Code Review for Ludum Dare 34 - Game Development

Detailed code review of "Growth" game from Ludum Dare 34, exploring development techniques, game mechanics, and optimization strategies for aspiring game developers.

• YouTube
• 40 minutes
• On-Demand
• Free Video