Open Source Summit + ELC North America 2020

We all care about keeping our data safe and systems secure. We counter security attacks using fuzzers and other test tools to
identify vulnerabilities and hardening the code base.

How can we ensure we aren't introducing new problems? Regression testing and continuous fuzzing helps in finding regressions and new problems as code evolves and new features get added

All of these efforts are focused on finding and fixing existing problems.

Could we do more in understanding common design and coding mistakes to avoid and/or minimize introducing vulnerabilities

This talk explores best practices and keeping an eye out for ways to be mindful of security during design and development with code examples derived from Linux kernel fixes to bugs found by security scanners and automated fuzz testing tools.