Interviewers: Scott Swigart and Sean Campbell
Interviewee: Ben Chelf
In this interview we talk with Ben Chelf from Coverity. In specific, we talk about:
- Scanning the worldwide open source code base for vulnerabilities
- The necessity of automating defect identification
- Building scalability into code analysis
- Overcoming the limitations of automatic scanning
- The hubris of believing too much in your code
- The difficulty of appearing objective
- The changing face of code security and analysis
