Skip to main content

Open Source Security

Nesta seção

Artigos relacionados

C++ in the wild: Which industries use C++?Software Bill Of Materials (SBOM) Explained: Why SBOMs are essential for cybersecurityFintech cybersecurity: How to build securely with open source5 potential risks of open source softwareStatic Code Analysis ExplainedHow to perform static code analysis

SCA & Enterprise Vulnerability Management

Why are there no incentives for security in Open Source?Securing Open Source pipeline using Plug-n-Play ScanningWhy can’t we simply add a button that does X?

Quer experimentar?

Agende uma demonstração ao vivo

SCA & Enterprise Vulnerability Management

0 minutos de leitura

| Talk |

John Bock | R&D, Optiv

While software composition analysis is typically found as part of the development cycle, it can also enable the traditional vulnerability management (VM) toolchain to gain insights into vulnerabilities on production assets. In this talk we'll explore how enterprise vulnerability management deals with open source vulnerabilities, how SCA can help, and how these vulnerabilities map to commonly used frameworks in the VM space, like MITRE ATT&CK. In addition to surveying application vulnerability management, we will also show process models for managing container vulnerabilities and issues that can be found inside infrastructure as code definitions.

Snyk helps software-driven businesses develop fast and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and more.

Learn more about Snyk here.

Up Next

Why are there no incentives for security in Open Source?

OSS maintainers often receive no compensation for their time in fixing vulnerabilities. How can we solve this conundrum?

Continuar lendo