Static Analysis Courses and Certifications

IEEE

Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels

Explore precise detection of double-fetch bugs in OS kernels, covering multi-read identification, symbolic checking, and mitigation strategies for enhanced system security.

• YouTube
• 22 minutes
• On-Demand
• Free Video

IEEE

Verification State-Space Reduction Through Restricted Parsing Environments

Explore state-space reduction in verification through restricted parsing environments. Learn about Crema language and its application in simplifying input-handling software verification.

• YouTube
• 34 minutes
• On-Demand
• Free Video

IEEE

Static Evaluation of Noninterference Using Approximate Model Counting

Explore quantitative information flow and interference assessment in software security using approximate model counting, with applications to real-world scenarios like search engines and TCP.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Alan Turing Institute

Invariant Synthesis for Linear Dynamical Systems - Pierre Ohlmann, ENS de Lyon

Explore linear dynamical systems, the Orbit Problem, and invariant synthesis. Learn about semialgebraic and semilinear invariants, Jordan blocks, and related concepts in computational mathematics.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Using Coccinelle to Detect and Fix Nested Execution Context Violations

Explore techniques for detecting and fixing nested execution context violations using Coccinelle, enhancing code quality and reliability in Linux kernel development.

• YouTube
• 28 minutes
• On-Demand
• Free Video

OWASP Foundation

Real World Static Analysis for Real Humans

Explore practical static analysis techniques for software security, focusing on real-world applications and human-centric approaches to code analysis.

• YouTube
• 51 minutes
• On-Demand
• Free Video

OWASP Foundation

Endpoint Finder: A Static Analysis Tool for Web Endpoint Discovery - Lightning Talk

Discover a static analysis tool for extracting web endpoints from JavaScript files, offering improved accuracy and reduced false positives compared to regex-based methods.

• YouTube
• 22 minutes
• On-Demand
• Free Video

OWASP Foundation

A Static Tainting Analysis Method for Aspect-Oriented Programs

Introduces a new method for detecting vulnerabilities in aspect-oriented web applications, focusing on static tainting analysis to improve security in languages like AspectJ.

• YouTube
• 37 minutes
• On-Demand
• Free Video

FOSS Static Analysis Tools for Embedded Systems and How to Use Them

Explore FOSS static analysis tools for embedded systems, covering kernel and userspace, local tools, and integrated solutions. Learn implementation techniques and best practices.

• YouTube
• 42 minutes
• On-Demand
• Free Video

SyzDescribe - Automated Static Generation of Syscall Descriptions for Kernel Drivers

Automated generation of syscall descriptions for Linux kernel drivers, enhancing Syzkaller's bug-finding capabilities and improving accuracy, coverage, and crash detection in kernel fuzzing.

• YouTube
• 39 minutes
• On-Demand
• Free Video

International PHP Conference

Squashing Bugs with Static Analysis

Discover advanced static analysis tools for PHP to find and prevent bugs efficiently, improving code quality and development workflow.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Going Beyond Metadata - Adopting Static Analysis in Dependency Tools

Explore the importance of static analysis in dependency tools for enhanced software security and reliability beyond traditional metadata approaches.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Finding Unmet Dependencies in Kconfig with the Kismet Static Analyzer

Explore Kismet static analyzer for detecting unmet dependencies in Kconfig, enhancing Linux kernel configurability and maintenance through automated build system analysis.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Paul G. Allen School

Building Program Analyzers for Developers

Insights on designing and implementing effective program analysis ecosystems for software engineers, exploring user needs, integration in development processes, and result reporting.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Docker

Using Static Analysis to Catch Configuration Vulnerabilities

Learn to secure containers and IaC using static analysis. Discover how to identify misconfigurations, prevent vulnerabilities, and implement early detection in your development workflow for improved application security.

• YouTube
• 38 minutes
• On-Demand
• Free Video