GitLab / Secure: Brown Bags

Presenter: Nicole Schwartz

Slides: https://docs.google.com/presentation/d/1hZAVqMY8btQtpG0nc90WTolJ1AVVZoDsFluz4MMHfXY/edit#slide=id.g29a70c6c35_0_68

This is the recording of a BrownBag presentation on introducing generic security reports in GitLab. https://gitlab.com/gitlab-org/secure/brown-bag-sessions/-/issues/35

This is a BrownBag Session (https://gitlab.com/gitlab-org/secure/brown-bag-sessions/-/issues/33) about creating a snapshot-based, feedback-guided fuzzer that uses perf events for feedback. Project with example code: https://gitlab.com/gitlab-org/vulnerability-research/kb/presentations/creating_a_snapshot_feedback_guided_fuzzer

This BrownBag session discusses problems and solutions for deriving fuzzing harnesses from existing unit tests.

BrownBag issue: https://gitlab.com/gitlab-org/secure/brown-bag-sessions/-/issues/28

This is a BrownBag session (https://gitlab.com/gitlab-org/secure/brown-bag-sessions/-/issues/29) on setting up fuzzing on gitlab-runner and the .gitlab-ci.yml parser found in GitLab

00:18 AST market
02:50 SAST, spell checker, identify by patterns
04:13 secret detection, API keys
04:46 DAST, deployed code
06:37 dependency scanning
08:04 container scanning
09:15 licence compliance
09:47 Fuzzing , business logic flaws
18:00 SAST, false positive, pattern matcher, spell checker
22:52 IAST
25:16 it sucks to set up fuzzing currently in most cases
33:10 fuzzers, logical flows, API's [...], SAST, DAST, heartbleed

This is the recording of a brown bag presentation on discussing developing with Docker at GitLab.

https://gitlab.com/gitlab-org/secure/brown-bag-sessions/-/issues/25

No description provided.

No description provided.

Talk through how to do Window development for GitLab with google compute platform.

The agenda of the video follows:

- Current state of Windows on GitLab CI/CD
- GCP Windows Image for Development
- Demo: How to use a Windows image on GCP
- Windows Developer Tips

A presentation about symbolic/concolic execution engines, existing tools, and their applications.