~/talk

Code Analysis with Zero False Positives in Java

on YouTube 55m
TalkinRussianat Joker 2022 · 2022-11-08..11-19· [security, compilers-and-language-design]

speakers

name:Dmitriy Ivanov
links:none on file
name:Dmitriy Mordvinov
links:none on file

resources

video:https://youtu.be/wybN-powiBw
slides:none on file

summary

The talk explains how dynamic symbolic execution can find deep bugs in Java with zero false positives, covering code-analysis categories and modern techniques. It describes implementing symbolic execution in Java so you can build your own analyzer, and shows using an SMT solver (Microsoft Z3) from Java to encode and solve NP-complete problems like Sudoku.

AI-written summary · about

chapters (10)

  1. 0:00Introduction
  2. 3:10Code analysis types
  3. 9:50Program analysis techniques
  4. 14:27Program approximation
  5. 21:07Symbolic execution theory
  6. 27:53SMT solvers and role
  7. 33:52Symbolic execution problems
  8. 39:07Solving tasks with SMT
  9. 45:54Practical applications
  10. 50:07Product and research

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.