Open Source Supply Chain Threat Landscape - A Moving Target - Brian Fox, Sonatype
Channel: The Linux Foundation
Date: 16/12/2022

Open Source Supply Chain Threat Landscape - A Moving Target - Brian Fox, Sonatype

Speakers: Brian Fox
There are growing numbers of organized attackers whose sole focus is exploiting vulnerabilities in open source ecosystems, frequently by making their malware appear legitimate. Security and development teams need to understand the cascading impacts and changing landscapes of these exploitations, and put developer-first security tools in the hands of developers everywhere. This talk explores how attacks have evolved over the last 15 years and provides a framework to mature your process and counter the latest types of attacks.