Application Security and Permissions
Facebook engineers receive 2021 IEEE Computer Society Cybersecurity Award for static analysis tools

Facebook engineers receive 2021 IEEE Computer Society Cybersecurity Award for static analysis tools

10/20/2021 · Clyde Rodriguez

What this post added

This post details the development and deployment of static analysis tools (Infer, Zoncolan, Pysa, Mariana Trench) for security bug detection across multiple programming languages (Hack, Python, Java/Android). It highlights the investment in these systems to scale security reviews, the feedback loop with security engineers, and the open-sourcing of Pysa and Mariana Trench. It also positions these tools within a broader defense-in-depth strategy including runtime analysis, code reviews, and bug bounty programs.

Read the original post ↗