talk
28c3: The Science of Insecurity
28c3 · 9 recommenders · 9 months
Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.
Hacker News 读者推荐理由: HN commenters call it one of the best security talks and the standard introduction to LANGSEC, which they use to argue for simpler, well-specified input formats.
Security & hackingComputability & complexity theoryLogic & formal methods#langsec#parsers#formal grammars#input validation#protocol security
“The best talk on computer security I have seen is Meredith Patterson's Science of Insecurity at 28c3”
查看原始 HN 讨论
