10,000 Dependencies Under the Sea
Explores risks, security challenges, and visibility issues in deeply nested open-source software dependencies.
Summary
This DEF CON talk covers 10,000 dependencies under the sea.
(AI summary — Claude Haiku)
Related talks
Main Stage·44 min
Jonathan Leitschuh
Dan Kaminsky Fellow Jonathan Leitschuh shares automated bulk-remediation frameworks using CodeQL to fix thousands of vulnerabilities across open-source ecosystems.
open-sourcesupply-chainbulk-remediation+2
App Sec Village·57 min
Vandana Verma Sehgal
Shares strategies for building and scaling an effective enterprise application security program using open-source tools.
appsecopen-sourcedevsecops+1
App Sec Village·28 min
Christian Schneider
Introduces Threagile, an open-source tool for executing code-driven and agile threat modeling in DevOps workflows.
threat-modelingagileopen-source+1