Security By Design & Smart Contract Audits | Shayan Eskandari

Welcome to "Security By Design and Smart Contract Audits" with Shayan Eskandari. This presentation was delivered on Friday, August 30th 2019.

What will students learn?
This course is appropriate for current and aspiring developers who want to implement security by design and financial smart contract applications. The idea of a serverless application running in a public ledger with open interface is new to most developers and hence common practices in traditional programming could easily result in security vulnerabilities in decentralized applications. In this session, discover smart contract security best practices and how to think about security in the design of decentralized applications (security by design). The second half of the session focuses on smart contract code auditing and a hands-on code review on real smart contracts.

Chapters
00:00 Introduction
1:28 Smart contracts vs traditional software development
10:35 Front-running vulnerability
14:38 Code Auditing
28:31 Smart Contract Vulnerabilities
32:02 Resources

====

Shayan Eskandari is currently completing his doctoral studies in Information Systems Engineering at Concordia University. He has worked in network and information systems security for several years and has extensive experience as a blockchain engineer in startups as well as contributing to open source projects. Currently he is working as the security engineer and smart contract auditor at ConsenSys Diligence.

Follow the CryptoCurrency Certification Consortium (C4) at:
https://cryptoconsortium.org/
  / learnmorewithc4  

Follow the Blockchain Training Conference at:
https://blockchaintraining.org

Note: Downloadable slides for this presentation are not available.

Prerequisite: Participants should have a general idea of how Ethereum works, understand the basic structure of smart contracts and Solidity. If possible, please pre-install these tools in order to save time during the session: VSCode, Solidity and Solidity Visual Auditor extensions.