▶

LANGSEC: Why Networked Software Stays Insecure

28c3 · Talk · 59 min · 2011 · YouTube title: 28c3: The Science of Insecurity
Why it's here

HN commenters call it one of the best security talks and the standard introduction to LANGSEC, which they use to argue for simpler, well-specified input formats.

What it covers

Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.