DeveloperWeek Europe 2021
Wednesday, April 28, 2021
KEYNOTE: Code Intelligence -- Fuzzing for Everyone! How to Push Shift-Left Testing Even Further?
Join on Hopin
Currently, white-box fuzzing is the most effective testing-approach to automatically identify vulnerability and stability issues within your software. For instance, Google already finds more than 80% of their bugs alone with fuzzing in contrast to all their other testing methods.
And it is very easy to use. In the future everyone will be able to integrate fuzz testing into their CI/CD. That’s why I say: “Developers should cover more security testing, themselves!”.
They are the experts! Developers know their own code best and with the right tools, they can identify bugs with little to no effort. And if by finding these bugs in an early stage of the development process, fixing them becomes very simple and cost-effective.
In my talk, you'll see why I'm so optimistic about the future!
We’ll cover the following topics:
- Modern fuzzing approaches (“feedback-based-fuzzing”)
- Instrumenting JVM code for fuzzing
- Automating fuzzing for web applications
- Integration of fuzzing in the development process
- Fuzzing web applications and integration into the CI/CD
Download these images to your phone and post using the Instagram app.