The Fixers Dilemma: Since Finding Vulnerabilities is the Easy Part

No ratings

Presented at Snowfroc 2025 by

Why does a “simple upgrade” often take so long and is so hard to get development teams to do? Here’s a tip: It's not always your company's process that is the problem. Security practitioners often understand what needs to be fixed but struggle to appreciate why fixing it can derail timelines and burn developer hours. This beginner-to-intermediate workshop is your chance to step into a developer’s shoes and gain firsthand experience in remediating known vulnerabilities in open source software so that you can better partner with your dev teams and help your org address more issues, faster. Participants will face real-world scenarios across Java and Python ecosystems, gaining first-hand experience of the obstacles developers tackle regularly. Through live demonstrations, interactive discussions, and guided exercises, we’ll simulate project-based challenges—walking into unfamiliar, legacy codebases and working through realistic constraints to remediate vulnerabilities.