Using LLMs to Secure Source Code
Eugene Yan
- When
- Tuesday, June 301:30 PM – 1:50 PM · 20 min
- Where
- Track 5San Francisco, CA · imported from ai.engineer's public schedule feed
About this session
Models are now finding and fixing real vulnerabilities at scale. Drawing on Anthropic's work with security teams, this talk walks a six-step workflow — threat model, sandbox, discover, verify, triage, patch — through one running example, shows where orgs actually bottleneck, and gives you a copy-paste path to your first scan.
Speaker
Member of Technical Staff, Anthropic
Eugene Yan is a Member of Technical Staff at Anthropic, where he works on safe and reliable AI systems at scale. He previously led ML/AI teams at Amazon, Alibaba, Lazada, and a healthtech Series A, and writes about LLMs, recommender systems, and engineering.
More in Security
- Through the AI Fog: The architectural decision the next 24 months of agentic security depends on.Tuesday, June 30 · 10:45 AM – 11:05 AM · Track 5
- Your LLM Stack Is a 2008 Database With Better Marketing: Why ML Security Is Dominated by Misconfiguration, Not Missing FeaturesTuesday, June 30 · 11:10 AM – 11:30 AM · Track 5
- We Gave an Agent Production Code Access and Then Tried to Sleep at NightTuesday, June 30 · 11:40 AM – 12:00 PM · Track 5
- Agentic Development SecurityTuesday, June 30 · 12:05 PM – 12:25 PM · Track 5
- Dual-Surface Architecture: Serving Humans and Agents from the Same Tool LayerTuesday, June 30 · 1:55 PM – 2:15 PM · Track 5
For developers: this programme is open data — JSON, iCal, schedule XML and an MCP endpoint.Show endpointsHide
- JSONEvery published session and speaker, in one request./aie-worldsfair-2026-import/feed.json
- iCalSubscribe in Google, Apple or Outlook Calendar./aie-worldsfair-2026-import/feed.ics
- Schedule XMLfrab / pentabarf — the format conference apps import./aie-worldsfair-2026-import/feed.xml
- MCP + RESTPoint Claude at the programme. OpenAPI 3.1 included./agents
No key, no signup, CORS open. Everything here is generated from the same data the organisers edit.