A New Hope for 2023? What Developers Must Learn Next
summary
Cybercrime revenue rises from about $415 billion in 2016 to roughly $6 trillion today, turning dependency attacks and supply-chain corruption into weapons of economic disruption. Open-source packages and build tools (Maven Central, Nexus) are primary targets; the log4j incident leaves ~33% of downloads still vulnerable and forces faster patching. Governments push SBOM requirements and standards like CycloneDX and SPDX. Sonatype ships an experimental visualization tool called Bom Doctor to generate and inspect SBOMs; it works well enough to reveal hidden dependency risk.
AI-written summary · about
chapters (16)
- 0:00Introduction to cyber crime
- 1:20Busting stereotypes
- 4:00Developer complacency
- 6:48The economic impact
- 10:32Types of cyber attacks
- 14:04The rise of cyber warfare
- 17:31Supply chain vulnerabilities
- 22:02Exploitation and patching
- 25:36The role of AI
- 28:24Governmental response
- 32:25Software Bill of Materials
- 35:46Tools for security
- 39:23Proactive developer action
- 42:29Assessing project quality
- 46:45Security best practices
- 50:18Conclusion and resources
related talks
41mSponsored Session: Software Supply Chain Threat Landscapes: A Moving Target
33mThree Things That Each Developer Should Know to Help Secure Code Base
31mOpen Source Supply Chain Threat Landscape - A Moving Target
41mThe Divine and Felonious Nature of Cyber Security
42mGame Over or Game Changing? Why Software Development May Never be the same again
32mAdapting DevOps in a World of Growing Software Supply Chain Attacks
51mOSS Supply Chain Threats and Why You Need a Holistic Security Strategy
44mKeeping Your Software Supply Chain Healthy