Santa Monica, CALIFORNIA
Location: Event details:
Annenberg Beach House
415 Pacific Coast Highway
Santa Monica, CA 90402
Thu, Jan 23 2019, 8:00 AM –
Fri, Jan 24, 2019, 4:30 PM PST


Event: Thu, Jan 23 2019 – Fri, Jan 24, 2019

Thanks for visiting us at AppSec Cali 2020

Thanks for visiting us at AppSec Cali 2020

At AppSec Cali 2020 Code Dx CEO Dr. Anita D’Amico and AppSec Researcher Chris Horn, discussed their research on Human factors.  This research sought to find out what physical elements impact the development of secure—or insecure—code. Elements such as team composition and size, the time of day during which code was written, and even distractions were evaluated for their effect on the number of vulnerabilities discovered in the corresponding code. The study identified the key human factors with the most significant effect on software vulnerability so that organizations can make the right decisions to ensure their developers are producing the most secure code possible.

Published research shows that static code analysis are one of the most cost-effective ways to catch security weaknesses before they become exploitable vulnerabilities. But finding the right code analyzers can be challenging. Chris Horn talked about “Choosing the right static code analyzers based on hard data.” Horn introduced a new, freely-available website that presents the results of this study. He discussed plans to track the types of weaknesses that analyzers can detect to help people quickly find the right analyzer and how to achieve good detection coverage of multiple weakness types.