No More Whack-a-Mole: How to Find and Prevent Entire Classes of Security Vulnerabilities

We frequently see the same types of security vulnerabilities appearing repeatedly over the course of a software project’s lifetime, and often across multiple projects. In this talk I’ll be discussing how security teams at companies such as Google and Microsoft use variant analysis to address this in their own software.