An Introduction to Manual Source Code Review

A practical primer on manual source code review — how to read code like an attacker and find what automated tools miss.

NUS GreyHats Security Wednesday
View slides

Talk delivered at the NUS GreyHats Security Wednesday series (April 2022). The session introduces a structured approach to manual source code review: how to identify trust boundaries, trace data flows, and focus attention on the components most likely to harbour exploitable bugs — the things automated scanners consistently miss.

Slides available on GitHub