Natalie Silvanovich from Google Project Zero talks with Kim Carter about what attack surface is in regards to software, how to identify risks and reduce the attack surface of the software you as a Software Engineer are creating. Natalie found over 100 0 day security defects in flash in her first year at Google, and discusses the risks and countermeasures around code sharing, third-party code, and techniques for identifying code libraries that are more likely to have security defects. Along with Developer workflow, post mortems are also carried out on a collection of 0 day bugs in well known software
Related Links
Podcast: Play in new window | Download
Subscribe: Apple Podcasts |
Tags: Application Security, Appsec, Information Security, InfoSec, JavaScript, security, Web Security, WebAssembly