Source code security audit is the process of reviewing source code with the intent of discovering security bugs. This talk will teach the principles of code review, different approaches to code review and some of the tools used for finding vulnerabilities in source code. The talk demonstrates some of the techniques that can be used to quickly identify vulnerabilities and improve static analysis by reducing false positives and adapting static analysis for new things such as templating languages or custom frameworks. The talk also demonstrates practical audits of popular open source applications for different bug classes, including:Memory corruptionLogic flawsAuthentication bypassInjection flawsand more