Making Invisible Things Visible: Tracking Down Known Vulnerabilities at 3000 Companies
No ratings
Presented at lascon 2016 by
We studied the patterns and practices exhibited by 3000 high-performance software development organizations, and we are coming to Austin to share the results. This year, software development teams around the world are consuming BILLIONS of open source and third-party components. The good news: they are accelerating time to market. The bad news: 1 in 17 components they are using include known security vulnerabilities. Ugh. This session aims to enlighten application security and development professionals by sharing results from the 2016 State of the Software Supply Chain Report -- a blend of public and proprietary data with expert research and analysis. Attendees in this session will learn: - What our analysis of 25,000 applications reveals about the quality and security of software built with open source components - How organizations like Mayo Clinic, Exxon, Capital One, the U.S. FDA and Intuit are utilizing the principles of software supply chain automation to improve application security - Why avoiding open source components over 3 years old might be a really good idea - How to balance the need for speed with quality and security -- early in the development lifecycle Attend this session and leverage the insights to understand how your organization’s application security practices compare to others. We'll share the industry benchmarks to take back and discuss with your development and security teams.