Stranger Danger - What Is The Risk From 3rd Party Libraries

Stranger Danger - What Is The Risk From 3rd Party Libraries

Explore the risks associated with third-party libraries in this Black Hat conference talk. Delve into vulnerability statistics, exposure metrics, and case studies of companies addressing patch management challenges. Learn how to evaluate vendor and product security using metrics beyond vulnerability counts and patch frequency. Understand the concept of Time of Exposure and its impact on risk assessment. Discover concrete actions to mitigate risks in your environment, including strategies for working with vendors, prioritizing vulnerabilities, and communicating with leadership. Gain insights into source code scanning, active testing, and streaming vulnerability management techniques to enhance your organization's security posture.