Common Ground·45 min
Yotam Perkal
Shows how SBOM, CSAF and VEX data can automate vulnerability triage and shift prioritization toward real risk.
vulnerabilitiesriskautomation+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 343 talks in the archive.
1–3 of 3 talks
Common Ground·45 min
Yotam Perkal
Shows how SBOM, CSAF and VEX data can automate vulnerability triage and shift prioritization toward real risk.
Breaking Ground·49 min
Yotam Perkal
Benchmarks commercial and open-source SCA scanners and shows how non-package-manager installs in Docker images hide vulnerabilities.
Common Ground·21 min
Yotam Perkal
Explains why CVSS-only prioritization falls short and how CSAF, VEX and exploitability data can automate triage.