Incoherent Code: How Code Quality Impacts Security - Tav Herzlich - NDC Security 2025

This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper Attend the next NDC conference near you: https://ndcconferences.com https://ndc-security.com/ Subscribe to our YouTube channel and learn every day: @NDC Follow our Social Media! https://www.facebook.com/ndcconferences https://twitter.com/NDC_Conferences https://www.instagram.com/ndc_conferences In the quest for rapid development and deployment, code quality often takes a backseat, leading to incoherent, unreadable, and poorly designed codebases. This negligence not only hampers maintainability and scalability but also opens the door to a myriad of security vulnerabilities. This talk aims to shed light on the often-overlooked correlation between code quality and security risks. By dissecting the consequences of bad coding practices, we will explore how they can inadvertently compromise security defenses and facilitate breaches. By the end of this session, you will have a better understanding of: - The intricate relationship between effective human communication, adherence to coding principles, and the mitigation of security risks. - The ways in which poor coding practices can evolve into significant security threats. - Techniques for identifying potential exploit hotspots within a codebase.