Software Supply Chain Lifecycle Management
summary
Claims that supply chains must be managed across development acquisition and DevOps with software composition analysis and standards automation are backed by specifics: 90 percent of typical applications use third‑party open source, a major vendor ships 400 products a year, 69 percent of defects trace to open source, average defect age 441 days, scans find 200,000 unpatched servers worldwide, and a Coverity+Defensics deployment reports 136% ROI and four months faster releases. Tools and standards called out include CVE/CWE/STIX and products like Coverity Defensics Seeker and AbuseSA.
AI-written summary · about
chapters (9)
- 0:00Start
- 4:49Iot Risks
- 20:39Vulnerabilities and Weaknesses
- 25:15Compliance Is Not Security
- 26:16What Are You Doing To Mitigate the Attacks That Impact Your Operations
- 28:19Owasp Top 10
- 33:44Average Defect Age
- 38:14Types of Testing
- 42:45Software Composition Analysis
related talks
11mSupply Chain Cybersecurity
09mSecuring the Software Supply Chain with Open Source
39mOpen Source Software Supply Chain Security — Why does it matter?
49mScaling Software Supply Chain Source Security in Large Enterprises
41mManaging the Risk of Software Supply Chain Attacks
29mSecuring the Unseen: Defending Against Open Source Software Supply Chain Attacks
44mKeeping Your Software Supply Chain Healthy
25mYour Software Supply Chain is Only as Secure as its Weakest Link