What do Citibank, First American Financial, McDonald’s, Nordstrom and Signet/Jared Jewelers have in common? Each company suffered from a type of vulnerability that alluded code analysis tools: business logic flaws. Chetan Conikee will present “case files” of each company along with a full set of taxonomies of business logic flaws coupled with scenarios and exploitative patterns.