Static Analysis Courses and Certifications

Hack In The Box Security Conference

ProdSec - A Technical Approach

Explore product security strategies, including risk management, automation, and attack surface reduction. Learn how to integrate security into development processes and foster a security-conscious culture within organizations.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

IEEE

Razzer - Finding Kernel Race Bugs through Fuzzing

Discover efficient kernel race bug detection through fuzzing with Razzer. Learn static analysis and deterministic thread interleaving techniques to identify vulnerabilities in Linux kernels.

• YouTube
• 20 minutes
• On-Demand
• Free Video

44CON Information Security Conference

Reverse Engineering Windows Malware 101 Workshop

Hands-on workshop introducing reverse engineering fundamentals for Windows malware analysis. Learn to set analysis goals, use tools, and apply computer science concepts through practical exercises.

• YouTube
• 1 hour 26 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Biting the Apple that Feeds You - macOS Kernel Fuzzing

Explore macOS kernel fuzzing techniques to identify critical flaws, including automated testing, targeted fuzzing, and in-memory fuzzing for improved code coverage and efficiency.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Meta

React Applications Structure Analysis Using AST - React.js Conf 2015

Explore how to leverage the Abstract Syntax Tree (AST) to unlock new possibilities in React applications, enabling powerful code analysis and transformations.

• YouTube
• 28 minutes
• On-Demand
• Free Video

USENIX Enigma Conference

Building an Automated Machine for Discovering Privacy Violations at Scale

Exploring static analysis techniques for detecting and fixing privacy leaks in large codebases, addressing challenges in building privacy-focused tools for developers and privacy engineers.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

Recon Conference

PreVice - Static Detection of Hooking Capabilities in Machine Code

Explore static analysis techniques for detecting hooking capabilities in Windows executables, including Detours, import, and syscall hooking, with insights from scanning millions of files.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Recon Conference

Rattle - An Ethereum EVM Binary Analysis Framework

Explore Rattle, an innovative framework for analyzing Ethereum smart contracts, enhancing auditability and security in blockchain interactions through advanced binary analysis techniques.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Recon Conference

Analyzing iOS Apps - Road from AppStore to Security Analysis Report

Toolset for detecting vulnerabilities in iOS apps: download and decrypt, decompile, statically analyze, and present results. Focuses on high-level semantics reconstruction and common mobile app security flaws.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Recon Conference

Using WPP and TraceLogging Tracing to Facilitate Dynamic and Static Windows

Explore advanced Windows tracing techniques using WPP and TraceLogging for enhanced dynamic and static analysis in cybersecurity investigations.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Recon Conference

Unveiling the Underground World of Anti-Cheats

Explore the ongoing battle between cheat developers and anti-cheat technologies in gaming. Learn about bypassing techniques and tools for testing anti-cheat software effectiveness.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

IEEE

DynPTA: Combining Static and Dynamic Analysis for Practical Selective Data Protection

Explore innovative techniques combining static and dynamic analysis for enhanced data protection, offering practical insights into selective security measures.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

IEEE

How the BIOS Assures Its Handling of Inputs

Explore BIOS input handling, firmware interfaces, and analysis techniques for formal validation and vulnerability detection, including static, dynamic, and symbolic execution approaches.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Using Ancient Math to Speed Up Security Assessments of Windows Executables

Discover how to accelerate Windows executable security assessments using Euclidean Distance and Bayes Theorem, enabling rapid triage and efficient risk reduction in regulated environments.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

The SecDevOpronomicon - Arcane Secrets for Scaling Your Company’s Security

Uncover arcane secrets for scaling security efforts in fast-paced development environments. Learn high-value engineering techniques, custom analyses, and CI/CD pipeline integration to enhance SecDevOps practices.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk