Entendiendo y Confiando en tus Dependencias en Python
Análisis de dependencias en Python: riesgos ocultos, ataques como typosquatting y estrategias para evaluar y confiar en paquetes de terceros. Herramientas y prácticas para realizar controles de seguridad efectivos.
Open Source Supply Chain Threat Landscape - A Moving Target
Explore the evolving landscape of open source supply chain threats, their impacts, and strategies for implementing developer-first security to counter sophisticated attacks.
Open Source Supply Chain Security - Are Containers the Biggest Blind Spot?
Experts discuss open source supply chain security, focusing on container vulnerabilities, SBOMs, and best practices for managing security in modern engineering toolchains.
Securing Supply Chains in C++, Java and JavaScript - Episode 133
Explore supply chain security across C++, Java, and JavaScript ecosystems. Learn about challenges, dependencies, versioning, and software bill of materials (SBOMs) from industry experts.
Software Supply Chain Aspects in Infrastructure as Code
Explore infrastructure-as-code security risks, focusing on supply chain vulnerabilities in reused templates and containers. Learn strategies to mitigate threats and ensure robust IaC practices.
Software Supply Chain Aspects in Infrastructure as Code and How to Secure It
Explore software supply chain risks in Infrastructure as Code, learn about KICS for security, and discover strategies to safeguard your infrastructure from vulnerabilities in reused components.
Unearthing Malicious and Risky OpenSource Packages Using Packj
Explore PACKJ, a security framework for detecting risky open-source packages. Learn about supply chain attacks, defense strategies, and real-world examples to enhance your software security practices.
Every Second Counts - Quantifying the Negative Externalities of Cybercrime via Typosquatting
Quantifying harm from typosquatting using intent inference. New metrics and methodology reveal average time cost to users and traffic loss for legitimate sites. Some typosquatters unexpectedly improve latency.
Adapting DevOps in a World of Growing Software Supply Chain Attacks
Explore DevSecOps strategies to combat rising software supply chain attacks. Learn about vulnerabilities, prevention techniques, and essential rules for securing your development pipeline.
Charla: Detección automatizada de archivos maliciosos en el repositorio PyPI
Detección automatizada de malware en PyPI: vectores de ataque, sistema de detección integrado, tipos de chequeos implementados y cómo combatir amenazas en el repositorio.
Bad Actors vs Our Community - Detecting Software Supply Chain Attacks
Explore techniques used by bad actors in software supply chain attacks and learn about a large-scale vetting system for detecting malware in Python packages.
Software Supply Chain Security: Understanding and Mitigating Package Ecosystem Attacks
Explore real-world software supply chain attacks, security vulnerabilities, and defense strategies through npm and NuGet examples, learning to protect projects from malicious package threats.