Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Software Composition Analysis

Showing: 62 courses
LASCON

Introduction to Inner-Loop Security - Shifting Left, but Better

0 rewiews
Explore inner-loop security as the next evolution of "shift left," enabling developers to build secure-by-design products through improved methodologies and tools.
Add to list
13 Lesons
50 minutes
On-Demand
Free-Video
LASCON

Security Instrumentation - The Future of Software Security

0 rewiews
Explore security instrumentation as a revolutionary approach to enhance software security, offering dynamic capabilities like intrusion detection, SBOM reporting, and runtime protection without code changes.
Add to list
20 Lesons
55 minutes
On-Demand
Free-Video
OWASP Foundation

Software Supply Chain Lifecycle Management: Reducing Attack Vectors and Enabling Rugged DevOps

0 rewiews
Exploring software supply chain lifecycle management to reduce attack vectors and enable rugged DevOps, focusing on IoT security, third-party software risks, and standards-based automation for threat detection.
Add to list
1 Lesons
52 minutes
On-Demand
Free-Video
OWASP Foundation

Software Bill of Materials (S-BoM) - Reducing Risk in Third-Party Components

0 rewiews
Explore best practices for managing third-party component risks using software bill-of-materials (S-BoM). Learn to create S-BoMs, identify vulnerabilities, and automate security responses in polyglot environments.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Open Source Software Supply Chain - Continuous Secure Software Ingestion

0 rewiews
Explore secure OSS ingestion in enterprises using Continuous Secure Software Ingestion (CSSI) application, built on Tekton & Open Policy Agent, for automated artifact grooming and policy-driven security checks.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SBOM: The Rest of the Story - Understanding Software Bill of Materials

0 rewiews
Experts discuss Software Bill of Materials (SBOM), addressing misconceptions, sharing challenges, and exploring implementation strategies for enhanced software supply chain security.
Add to list
8 Lesons
27 minutes
On-Demand
Free-Video
BSidesLV

Perfect Vulnerability Reports and Still Getting Hacked - Limitations of Security Tools

0 rewiews
Explore limitations of vulnerability detection tools, challenges in vulnerability management, and strategies for improving application security despite imperfect reporting systems.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
BSidesLV

Hiding in Plain Sight - The Untold Story of Hidden Vulnerabilities

0 rewiews
Uncover limitations of vulnerability scanners and SCA tools through groundbreaking research. Learn about hidden vulnerabilities, scanner blindspots, and the need for holistic software security approaches.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
LASCON

Knowing What Risks Matter and Don't in Your Open Source

0 rewiews
Explore key findings on open-source software risks, including usage trends, vulnerability rates, and best practices. Learn to prioritize and address critical issues in application security.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
Fission

Towards Intelligent Application Security

0 rewiews
Exploring the evolution of application security and proposing an automated approach integrating security into development and operations, aided by learning techniques and threat intelligence.
Add to list
1 Lesons
52 minutes
On-Demand
Free-Video
OpenSSF

Managing Vulnerabilities in Open-Source Dependencies

0 rewiews
Learn strategies to secure open-source dependencies, evaluate software composition analysis tools, and shift from reactive to proactive security postures in product development.
Add to list
1 Lesons
13 minutes
On-Demand
Free-Video
OWASP Foundation

OWASP Dependency Track - Fortifying the Software Supply Chain

0 rewiews
Explore strategies to secure software supply chains using OWASP Dependency Track, a powerful tool for identifying and mitigating vulnerabilities in third-party components.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
Hackitect's playground

DevSecOps: Connecting Developers, Security, and Operations

0 rewiews
Explore DevSecOps methodology, connecting developers, security, and operations. Learn about tooling, cloud security automation, and the importance of continuous learning in fostering a collaborative DevSecOps culture.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
Conf42

Open-Source Vulnerability Management: Use the Source - DevSecOps 2022

0 rewiews
Explore open-source vulnerability management techniques using source code analysis for effective security practices in DevSecOps environments.
Add to list
2 Lesons
49 minutes
On-Demand
Free-Video
Conf42

Supply Chain Security for Open Source Projects

0 rewiews
Explore supply chain security strategies for open-source projects, enhancing protection against vulnerabilities and ensuring robust software development.
Add to list
2 Lesons
30 minutes
On-Demand
Free-Video
DevSecCon

Building Your First DevSecOps Pipeline

0 rewiews
Demystify DevSecOps and build a functional pipeline with cutting-edge security testing, including SCA, SAST, and DAST tooling. Supercharge software security and achieve true "Shift Left" success.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
DevSecCon

5 Open Source Security Tools All Developers Should Know About

0 rewiews
Discover five essential open-source security tools for CI/CD pipelines. Learn to integrate SAST, secrets detection, SCA, IaC security, and DAST with practical code examples and demos.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
OpenUK

Open Source Supply Chain Security for Enterprises

0 rewiews
Explore enterprise-level open source supply chain security strategies with insights from JPMorgan Chase's Product Security Director.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
DevConf

SBOMs: Zero to Hero - A Comprehensive Guide

0 rewiews
Discover SBOMs: definition, importance, contents, creation methods, and open-source tools. Explore integration challenges and solutions in build processes.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
Conf42

Securing the Software Supply Chain - Beyond SBOM Risk Assessment

0 rewiews
Explore advanced software supply chain security strategies, focusing on risk assessment, contributor profiles, project dynamics, and integrating security into deployment pipelines.
Add to list
21 Lesons
36 minutes
On-Demand
Free-Video
All Things Open

OSS Supply Chain Security: Drowning in Information, While Starving for Wisdom?

0 rewiews
Explore challenges and opportunities in open source software supply chain security, focusing on actionable knowledge for developers and operators amid increasing information availability.
Add to list
1 Lesons
11 minutes
On-Demand
Free-Video
Cloud Native Summit

Securing Your Software Supply Chain with SBOMs

0 rewiews
Explore software supply chain security through SBOMs, focusing on artifact provenance and package identification for enhanced protection.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
Hackitect's playground

Generating Software Bill of Materials (SBOM) Using AWS Inspector

0 rewiews
Learn how to generate and utilize Software Bill of Materials (SBOM) through AWS Inspector, covering both console and CLI approaches for effective software component tracking.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SBOM X-Ray Superpowers: Making Better SBOMs and Using SBOMs

0 rewiews
Explore innovative techniques for enhancing SBOM accuracy and completeness using SBOM discovery, look-up, and transparency logs. Learn to leverage these methods to improve software security and vulnerability response.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
OWASP Foundation

Dependency-Track: Intelligent Software Composition Analysis Platform

0 rewiews
Explore Dependency-Track, an intelligent SCA platform for identifying and reducing risks from third-party components. Learn about its bill-of-material approach and automation options for continuous component analysis.
Add to list
11 Lesons
34 minutes
On-Demand
Free-Video
OWASP Foundation

Supply Chain Anarchy - Trojaned Binaries in the Java Ecosystem

0 rewiews
Explore the security risks of third-party code in Java applications, focusing on potential discrepancies between source code and binaries. Learn about an automated security pipeline for detecting malicious differences.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
OWASP Foundation

Large-Scale Software Composition Analysis: Uncovering Vulnerable Dependencies in 600 Apps

0 rewiews
Discover how OWASP Dependency-Check enabled large-scale Software Composition Analysis on hundreds of vendor-managed apps, addressing software supply chain risks and patch debt in just two months.
Add to list
13 Lesons
51 minutes
On-Demand
Free-Video
OWASP Foundation

Narrow - SCA Reachability Analysis Without The Effort

0 rewiews
Explore efficient SCA reachability analysis techniques to enhance software security without excessive effort, presented by Josiah Bruner at Global AppSec Dublin.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
Docker

Using Static Analysis to Catch Configuration Vulnerabilities

0 rewiews
Learn to secure containers and IaC using static analysis. Discover how to identify misconfigurations, prevent vulnerabilities, and implement early detection in your development workflow for improved application security.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
Linux Foundation

Utilizing Package-URLs for SBOM Management and Vulnerability Tracking

0 rewiews
Explore SBOM management, Software Composition Analysis, and vulnerability tracking using Package-URLs and VulnerableCode for effective open-source component handling and policy compliance.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
JetBrains

Leverage Open-Source Code with Confidence - JetBrains Dependency Checker Plugin

0 rewiews
Discover how to safely use open-source code with the JetBrains Dependency Checker plugin. Learn about vulnerability detection, detailed information, and suggested fixes for secure development.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
Linux Foundation

Vulnerabilities and Misconfigurations in Cloud-Native Security - Two Sides of the Same Risk Coin

0 rewiews
Explore cloud-native security risks, focusing on vulnerabilities and misconfigurations in modern applications. Learn proactive defense strategies for comprehensive protection across entire application stacks.
Add to list
15 Lesons
46 minutes
On-Demand
Free-Video
Linux Foundation

Software Composition Risk - Determining Actual Risk and Taking Action

0 rewiews
Explore software composition risk assessment, mitigation strategies, and proactive processes to enhance enterprise security beyond vulnerability scanning and manual updates.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
OWASP Foundation

Scratch Containers and the Supply Chain Trouble

0 rewiews
Explore scratch containers, their benefits in reducing vulnerabilities, and potential challenges in software composition analysis. Learn about security implications for containerized applications.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
Hack in Paris

Building Systems on Shaky Grounds - 10 Tactics to Manage the Modern Supply Chain

0 rewiews
Explore 10 tactics for managing modern software supply chains, balancing open-source benefits with security risks. Learn to assess vendors, conduct red team exercises, and implement effective incident response strategies.
Add to list
20 Lesons
42 minutes
On-Demand
Free-Video
DefCamp

Securing Without Slowing - DefCamp - 2017

0 rewiews
Explore DevOps-inspired strategies for enhancing security without compromising speed. Learn about rugged DevOps, pipeline protection, and automation to create robust, efficient systems.
Add to list
34 Lesons
51 minutes
On-Demand
Free-Video
OWASP Foundation

OWASP Flagship Projects - OWASP Dependency-Check

0 rewiews
Learn to identify and mitigate vulnerabilities in software dependencies using OWASP Dependency-Check, enhancing application security through effective composition analysis.
Add to list
10 Lesons
29 minutes
On-Demand
Free-Video
OWASP Foundation

Security as a Service - Work Where You Engineers Live

0 rewiews
Integrating security into existing development workflows for efficient vulnerability management and faster response times. Learn how to leverage automation and project tracking tools to enhance security practices.
Add to list
17 Lesons
28 minutes
On-Demand
Free-Video
Black Hat

The Devils in the Dependency - Data Driven Software Composition Analysis

0 rewiews
Análisis de datos sobre el uso de bibliotecas de código abierto en aplicaciones, examinando vulnerabilidades, dependencias y patrones de actualización para mejorar la seguridad del software.
Add to list
26 Lesons
38 minutes
On-Demand
Free-Video
Black Hat

Effective Vulnerability Discovery with Machine Learning

0 rewiews
Explore machine learning techniques for effective vulnerability discovery in software dependencies, enhancing security analysis beyond traditional methods.
Add to list
10 Lesons
27 minutes
On-Demand
Free-Video
NDC Conferences

Protect Yourself Against Supply Chain Attacks

0 rewiews
Explore supply chain attack vectors, from CI/CD pipeline vulnerabilities to package squatting, and learn protective measures for securing your development environment.
Add to list
23 Lesons
1 hour 2 minutes
On-Demand
Free-Video
Devoxx

Open Source Supply Chains and Consumption Risk Governance - Containers & Trust

0 rewiews
Explore secure container deployments, open source security, and risk management in modern software development. Learn best practices for minimizing vulnerabilities and ensuring trust in large-scale applications.
Add to list
29 Lesons
43 minutes
On-Demand
Free-Video
GOTO Conferences

Keep Your Dependencies in Check

0 rewiews
Explore tools and strategies for managing software dependencies, from package managers to automated bots, to keep your applications secure and up-to-date while delivering business value.
Add to list
23 Lesons
38 minutes
On-Demand
Free-Video
Eclipse Foundation

Complete Compliance Toolchain for Yocto Projects - Software Composition Analysis and SBOM Automation

0 rewiews
Discover how to implement a comprehensive compliance toolchain for Yocto projects, featuring advanced tools like Fossology, Scancode, SPDX, and specialized solutions for managing large-scale software composition analysis.
Add to list
1 Lesons
13 minutes
On-Demand
Free-Video
DevSecCon

Understanding Software Component Analysis (SCA) in Plain Language

0 rewiews
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, demystifying their importance for protecting organizational assets and code integrity.
Add to list
1 Lesons
15 minutes
On-Demand
Free-Video
Conf42

Mapping the Minefield of Open Source Software Risks - DevOps 2024

0 rewiews
Explore open source software risks, vulnerabilities, and remediation strategies. Learn about software composition analysis, reachability, and semantic versioning for effective dependency management.
Add to list
18 Lesons
22 minutes
On-Demand
Free-Video
OpenSSF

Prioritisation of SCA Findings in Software Dependencies Using Static Reachability Analysis

0 rewiews
Explore static and reachability analyses for effective prioritization of software dependency vulnerabilities, enhancing security and productivity in development workflows.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
Hackitect's playground

Snyk Free DevSecOps Tools and Resources

0 rewiews
Explore Snyk's free DevSecOps tools for identifying and addressing vulnerabilities in your code, regardless of programming language. Learn to enhance application security with powerful resources.
Add to list
1 Lesons
16 minutes
On-Demand
Free-Video
OpenSSF

What's New in the World of SBOMs?

0 rewiews
Explore recent developments in Software Bill of Materials (SBOMs) with industry experts, discussing advancements, challenges, and best practices in software supply chain security.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
NDC Conferences

Application Security from Start to Finish

0 rewiews
Comprehensive guide to integrating security throughout the development process, covering secure environments, dependency management, vulnerability scanning, and advanced testing techniques.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
OpenSSF

What Is Going On In Your Source Code? Understanding Software Component Analysis in Plain Language

0 rewiews
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, understanding their importance in protecting organizations from emerging security threats.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
Eclipse Foundation

Open Source Licensing in the Era of AI-Assisted Coding

0 rewiews
Explore the intersection of AI-assisted coding and open source licensing, focusing on compliance challenges, risk management, and practical solutions for modern software development.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
Linux Foundation

Proactively Auditing Open Source Dependencies for Security - Here Is a Clean Section of the Beach

0 rewiews
Explore proactive auditing of open source dependencies, scaling challenges, and data handling in the Alpha-Omega project. Learn about efforts to enhance software security through systematic scanning and repair.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

The Runtime Rodeo - Taming Open Source Image Behavior

0 rewiews
Explore a new standard for creating behavioral fingerprints of open source images at runtime, enhancing cloud native security beyond traditional software supply chain measures.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
NDC Conferences

Developing Secure Software with GitHub - Automated Security Checks and Tools

0 rewiews
Learn to leverage GitHub for automated security checks, including static application security testing and software composition analysis, to enhance your application's security posture with minimal effort.
Add to list
1 Lesons
1 hour 2 minutes
On-Demand
Free-Video
Eclipse Foundation

Actions in the Wild: Usability and Ease of Use of Open Source Security Tools

0 rewiews
Discover how to implement and optimize open-source security tools in software development, focusing on vulnerability analysis, CVE scoring, and automated GitHub security actions.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
LF Networking

ONAP's Recipe for Managing CVEs and Securing Open Source Software

0 rewiews
Discover ONAP's effective strategies for managing CVEs, securing open-source dependencies, and implementing automated vulnerability management processes in software development.
Add to list
7 Lesons
38 minutes
On-Demand
Free-Video
Eclipse Foundation

GitHub for Fun, Profit, and Security

0 rewiews
Master GitHub's advanced features for enhanced productivity, security, and efficient organization management through configuration-as-code solutions and best practices for access control.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Eclipse Foundation

Disrupting the Software Composition Analysis Market with Open Source Software and Open Data

0 rewiews
Explore how SCANOSS challenges the Software Composition Analysis market through open-source strategies, market trends, and innovative approaches to SBOM adoption and emerging technologies.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
Eclipse Foundation

Software Composition Analysis at Scale with Eclipse Apoapsis

0 rewiews
Discover how to implement large-scale Software Composition Analysis using Eclipse Apoapsis, focusing on SBOM generation, vulnerability tracking, and license compliance through automated server-based solutions.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
Eclipse Foundation

Hello World+ Projects to Test and Benchmark Software Composition Analysis Tools

0 rewiews
Explore software composition analysis tools through Hello World+ projects, focusing on vulnerability detection, license compliance, and SBOM creation for diverse programming environments.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
Eclipse Foundation

Enhancing Software Supply Chain Security: Approaches to Software Composition Analysis

0 rewiews
Explore software composition analysis tools Eclipse Steady and OWASP Dependency-Check to enhance Java software supply chain security through vulnerability detection in third-party dependencies.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video