How Tree-of-AST Redefines the Boundaries of Dataflow Analysis
In recent years, vulnerability discovery has largely relied on static analysis tools with predefined pattern matching and taint analysis.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Briefings·35 min
Yuhao Jiang · Xinlei Ying · Ziming Zhang
VMware ESXi appears to be increasingly secure, as indicated by fewer CVEs and 0 success at Pwn2Own.
privilege-escalationexploitationvulnerabilities+3
Briefings·25 min
Yuan Luo · Zhaojun Chen · Yi Sun · Rhettxie Rhettxie
Static Application Security Testing (SAST) plays a significant role in modern vulnerability discovery.
open-sourcevulnerabilitiesapplication-security+2
Briefings·36 min
Lance Cain · Daniel Mayer
Security researchers demonstrate post-exploitation techniques abusing Jamf Pro device management workflows for enterprise persistence and privilege escalation.
cloudred-teamingopen-source+3