Keynote | High-assurance Code Reviews: How Consulting Works When The Risks Are High by Dan Guido

This talk addresses the evolving landscape of software security consulting, highlighting the shift from traditional manual code reviews to more robust techniques necessary for securing high-assurance targets. The speaker, Dan Guido, CEO of Trail of Bits, shares insights from hundreds of time-sensitive software reviews where the stakes are significant, particularly for cryptographic libraries, cloud-native applications, and smart contracts. He discusses effective strategies and lessons learned in managing security risks within tight timelines, emphasizing the importance of developing predictable outcomes in high-risk software environments. Dan's extensive background in cybersecurity, research, and education enhances the perspective he brings to this critical topic.