Lightning Talk: Operationalizing our Open Source Security Scanner - Nikki Brandt & Oliver Grubin
Channel: AppSec California
Date: 2020-02-21

https://appseccalifornia.org/

During Summer 2019, two excellent interns (Ryan Slama and Matt Dwoncyzk) came to Slack to help us build a tool to scan for insecure, out-of-date open source dependencies. But this talk (mostly) isn’t about their tool - it’s about what happened after they wrote the tool and returned to school. We’ll tell you about how we took their awesome proof of concept and integrated it into our daily operations at Slack to help tackle the difficult and ongoing issues around including open source components in enterprise grade software. Along with the specifics of our situation, we'll also reflect on general lessons learned about integrating tooling into reality.

Nikki Brandt
Staff Security Engineer, Slack
Nikki Brandt is a Staff Tech Lead/Manager on the Product Security team at Slack, where she currently leads the Product Security team and drives the security review process. Before joining Slack, Nikki was a senior security consultant at NCC Group (via Matasano).

Oliver Grubin
Senior Security Engineer, Slack
Oliver Grubin is a Senior Security Engineer on the Product Security Team at Slack where he works on developing tooling, libraries and services to help keep Slack secure.