Presentations

• Using Static Analysis To Find Complex Vulnerabilities @ Meta, Blackhat MEA 2022, slides

• Do You Speak My Language? Make Static Analysis Engines Understand Each Other, Blackhat US 2021, slides, video,
  • Also presented in Arab Security Conference, Egypt 2022, video
• UNEXPECTED EXECUTION: Wild Ways Code Execution Can Occur In Python, PyCon US 2021, slides, video
• Move Fast and Secure Things (with Static Analysis), OWASP London 2019, Slides, video

Blog posts/Write ups

• [Post] How Meta discovers data flows via lineage at scale, Meta, 2025
• [Post] SAST for the People, Lacework, 2024
• [Book chapter]: How to Make Taint Analysis Precise, Challenges of Software Verification Book, 2023
• [Post] Pysa: An open source static analysis tool to detect and prevent security issues in Python code, Meta, 2020
• [Post] Zoncolan: How Facebook uses static analysis to detect and prevent security issues, Meta, 2019

University Guest lecturer

• Securing Billions: Application Security Teams at Top Tech Companies, Imperial College London, 2025
• University of Alberta, Canada, 2020
• American University in Egypt (AUC), Egypt, 2020
• Arab Academy for Science, Technology & Maritime Transport (AAST), Egypt 2020
• University College London, UK, 2019
• Royal Holloway University of London, UK, 2019