FPs are Cheap. Show me the CVEs!

Описание: SAST tools are notoriously hard to evaluate and benchmark. The most important thing you want to know about a tool before spending time and money on it: does it give me relevant results? Does it really find the vulnerabilities it promises? Vendors are quick to tell you that their technology will find...

By: Kevin Backhouse & Bas van Schaik

Full Abstract & Presentation Materials:
https://www.blackhat.com/eu-20/briefi...