Static Analysis Courses and Certifications

International PHP Conference

Squashing Bugs with Static Analysis

Discover advanced static analysis tools for PHP to find and prevent bugs efficiently, improving code quality and development workflow.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Finding Unmet Dependencies in Kconfig with the Kismet Static Analyzer

Explore Kismet static analyzer for detecting unmet dependencies in Kconfig, enhancing Linux kernel configurability and maintenance through automated build system analysis.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Going Beyond Metadata - Adopting Static Analysis in Dependency Tools

Explore the importance of static analysis in dependency tools for enhanced software security and reliability beyond traditional metadata approaches.

• YouTube
• 41 minutes
• On-Demand
• Free Video

OWASP Foundation

Endpoint Finder: A Static Analysis Tool for Web Endpoint Discovery - Lightning Talk

Discover a static analysis tool for extracting web endpoints from JavaScript files, offering improved accuracy and reduced false positives compared to regex-based methods.

• YouTube
• 22 minutes
• On-Demand
• Free Video

OWASP Foundation

A Static Tainting Analysis Method for Aspect-Oriented Programs

Introduces a new method for detecting vulnerabilities in aspect-oriented web applications, focusing on static tainting analysis to improve security in languages like AspectJ.

• YouTube
• 37 minutes
• On-Demand
• Free Video

OWASP Foundation

Real World Static Analysis for Real Humans

Explore practical static analysis techniques for software security, focusing on real-world applications and human-centric approaches to code analysis.

• YouTube
• 51 minutes
• On-Demand
• Free Video

Alan Turing Institute

Invariant Synthesis for Linear Dynamical Systems - Pierre Ohlmann, ENS de Lyon

Explore linear dynamical systems, the Orbit Problem, and invariant synthesis. Learn about semialgebraic and semilinear invariants, Jordan blocks, and related concepts in computational mathematics.

• YouTube
• 49 minutes
• On-Demand
• Free Video

IEEE

Static Evaluation of Noninterference Using Approximate Model Counting

Explore quantitative information flow and interference assessment in software security using approximate model counting, with applications to real-world scenarios like search engines and TCP.

• YouTube
• 17 minutes
• On-Demand
• Free Video

IEEE

Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels

Explore precise detection of double-fetch bugs in OS kernels, covering multi-read identification, symbolic checking, and mitigation strategies for enhanced system security.

• YouTube
• 22 minutes
• On-Demand
• Free Video

IEEE

Verification State-Space Reduction Through Restricted Parsing Environments

Explore state-space reduction in verification through restricted parsing environments. Learn about Crema language and its application in simplifying input-handling software verification.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Paul G. Allen School

Building Program Analyzers for Developers

Insights on designing and implementing effective program analysis ecosystems for software engineers, exploring user needs, integration in development processes, and result reporting.

• YouTube
• 43 minutes
• On-Demand
• Free Video

OWASP Foundation

Detecting Malicious Dependencies at Scale with Static Analysis

Explore static analysis techniques for identifying malicious dependencies in open-source packages, including Semgrep rules and metadata analysis to enhance software supply chain security.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Root Canal Static Analysis Audit of Zephyr

Comprehensive static analysis audit of Zephyr's code quality, revealing deeper security vulnerabilities beyond standard linters. Insights on advanced bug detection and fixing processes for critical open-source projects.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Docker

Using Static Analysis to Catch Configuration Vulnerabilities

Learn to secure containers and IaC using static analysis. Discover how to identify misconfigurations, prevent vulnerabilities, and implement early detection in your development workflow for improved application security.

• YouTube
• 38 minutes
• On-Demand
• Free Video

DevConf

OpenScanHub - Static Analysis of a Linux Distribution

Explore OpenScanHub's journey from internal Red Hat tool to open-source static analysis service, its key features, and integration with Fedora-related services.

• YouTube
• 34 minutes
• On-Demand
• Free Video