LANGSEC: Why Networked Software Stays Insecure
28c3 · Talk · 59 min · 2011 · YouTube title: 28c3: The Science of Insecurity
Why it's here
HN commenters call it one of the best security talks and the standard introduction to LANGSEC, which they use to argue for simpler, well-specified input formats.
What it covers
Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.