I am employed as a Principal Security Architect at Adobe at the time I published this article. All opinions are my own. The world’s economy relies heavily on C/C++ applications, yet a staggering 70% of CVEs affecting these applications are due to memory safety flaws. Rewriting all code in memory-safe languages is infeasible, necessitating smarter approaches. In this talk, you’ll learn about a simplified threat model to guide efforts, how adversaries search for memory safety flaws, and mul...
