Justin Smith

Supporting Effective Strategies for Resolving Vulnerabilities Reported by Static Analysis Tools

2018

Static analysis tools detect potentially costly security defects early in the software development process. However, these defects can be difficult for developers to accurately and efficiently resolve. The goal of this work is to understand …

A Case Study of Software Security Red Teams at Microsoft

2020

The modern software security adversary employs persistent and evasive attack techniques, for example-using zero-day exploits that have not been disclosed publicly-to target high-profile companies for political and economic espionage or to exfiltrate sensitive data or …