Where do security bugs come from? Any how do you find them in the real world? Stanford CS 155 Spring 2014 Alex Stamos CISO, Yahoo.