Vous voulez l’essayer par vous-même ?
SCA & Enterprise Vulnerability Management
0 minutes de lecture
| Talk |
John Bock | R&D, Optiv
While software composition analysis is typically found as part of the development cycle, it can also enable the traditional vulnerability management (VM) toolchain to gain insights into vulnerabilities on production assets. In this talk we'll explore how enterprise vulnerability management deals with open source vulnerabilities, how SCA can help, and how these vulnerabilities map to commonly used frameworks in the VM space, like MITRE ATT&CK. In addition to surveying application vulnerability management, we will also show process models for managing container vulnerabilities and issues that can be found inside infrastructure as code definitions.
Snyk helps software-driven businesses develop fast and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and more.
Learn more about Snyk here.
Up Next
Why are there no incentives for security in Open Source?
OSS maintainers often receive no compensation for their time in fixing vulnerabilities. How can we solve this conundrum?
Poursuivre la lecture
