The Art of Defensive Programming
summary
Stats claim 68% of CEOs demand no slowdown so 50% of companies sacrifice security and 80–90% of new app code comes from open source, while shifting left allegedly cuts security incidents by 80% and a defect costs 60× more to fix in production. Demonstration shows CodeQL in VS Code: generate a CodeQL database, run community queries (CWE-079/XSS example), surface vulnerable lines, and integrate scans into GitHub Advanced Security for automated code and dependency checks.
AI-written summary · about
chapters (12)
- 0:00Defensive programming intro
- 2:00Security challenges today
- 4:29Shift security left
- 5:32Pre-commit security best practices
- 7:15Secure coding standards
- 9:02Zero trust and layered defense
- 11:15IDE security plugins
- 11:36Static and dynamic analysis
- 13:01Demo: CodeQL scanning
- 20:57Fixing with IDE tools
- 21:42Training and champions
- 22:46Call to action
related talks
44mAn intro to improving the security of your code with free analysis tools
42mSecure or Insecure Code, That Is the Question
33mShipping Fast, Breaking Silently: Why AI-Generated Code Needs a Second Opinion
36mCode Analysis: Empowering developers to write performant, reliable, and safe C++
45mDefensive Coding Bootcamp
44mShift-Left-Security with the Security Test Pyramid
51mSecDevOps: Current Research and Best Practices
01h 00mCode Quality in Practice