Open Source Software Flood: Learning to swim
no recording on file
summary
Covers the security, operational, and legal challenges of using third-party open source components (OSS) in applications, noting that many apps contain more OSS than proprietary code and that vulnerable components are a common OWASP risk. Compares DIY (make-it-yourself) and commercial (buy-it) approaches for managing those risks so teams can track, assess, and control OSS usage.
AI-written summary · about
related talks
19mResponsible consumption of open source
41mManaging the risk and growth of using Open Source Software
43mTime to Spell Out Open Source Software Security
38mApplication Security in the age of Open Source
35mOpen source security: Opportunity or oxymoron?
30mDevSecOps: Understanding Open Source Software risk in your applications
40mSecure Your Code from Open Source Vulnerabilities
29mOpen Source and IP Departments: Risk Containment and Portfolio Management