BSidesSF 2025·31 min
Ziyad Edher · Chris Norman
Presenters detail vulnerability discovery and exploitation in Scalably Securing Third-party Dependencies in... ( Ziyad Edher, Chris Norman).
dependenciesscalablythird-party+2
dependencies
31 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 31 talks · loading…
hardwear.io·31 min
Presenters detail vulnerability discovery and exploitation in 2017:- CXO Panel: UnDependable Dependencies In Safety Critical Infrastructure.
critical-infrastructureinfrastructuresafety+1
OWASP Foundation·51 min
Frank Liauw
Frank Liauw analyzes 600 apps in 60 days: Our journey to uncover vulnerable dependencies at scale with ....
dependenciesappjourney+2
The Linux Foundation·29 min
Demonstrates A new way to manage dependencies: methods to extended bzlmod and evaluates key implications for security practitioners.
dependenciesmanagedependencie+2
The Linux Foundation·7 min
Provides bazelCon 2019 Day 1: Lightning Talk - Python Dependencies the Right Way and evaluates key implications for security practitioners.
pythondependenciesbazelcon+1
The Linux Foundation·11 min
Demonstrates bazelCon 2019 Day 1: Lightning Talk - Why Not To Have Bazel Dependencies and evaluates key implications for security practitioners.
dependenciesbazelconlightning
The Linux Foundation·38 min
Jess McClintock
Explores capslock: Escaping Bad Dependencies and evaluates key implications for security practitioners.
dependenciescapslockescaping+2
The Linux Foundation·30 min
Shravan Narayan
Explores dont Get Owned by Dependencies: How Firefox Uses Wasm to Protect Itself from and evaluates key implications for security practitioners.
dependenciesfirefoxowned+1
The Linux Foundation·12 min
Evaluates finding the exact version of external dependencies and evaluates key implications for security practitioners.
dependenciesfindingexact+2
The Linux Foundation·25 min
Paul Gazzillo
Discusses finding Unmet Dependencies in Kconfig with the Kismet Static Analyzer and evaluates key implications for security practitioners.
dependencieskismetfinding+2
The Linux Foundation·10 min
Presents how Stripes new tool detects extraneous Java dependencies and evaluates key implications for security practitioners.
dependenciesstripetool+2
The Linux Foundation·26 min
Gazelle at Stripe
Analyzes how to automate target dependencies in BUILD files with Gazelle at Stripe and evaluates key implications for security practitioners.
dependenciesautomatetarget+2
The Linux Foundation·12 min
Analyzes how Uber Manages Go Dependencies with Bzlmod and evaluates key implications for security practitioners.
dependenciesubermanage+2
The Linux Foundation·17 min
Paul Vixie · AWS Security
Discusses keynote: Revisiting Total Cost of Ownership for External Dependencies and evaluates key implications for security practitioners.
dependenciesrevisitingtotal+1
The Linux Foundation·9 min
Ashish BIjlani
Outlines lightning Talk: Enabling “Safe” Use of Untrusted Open Source Dependencies and evaluates key implications for security practitioners.
open-sourcedependencieslightning+1
The Linux Foundation·11 min
Details managing dependencies at scale and evaluates key implications for security practitioners.
dependenciesmanagingdependencie+2
The Linux Foundation·42 min
Kim Lewandowski · Christie Wilson
Investigates protect Yourself from Malicious Dependencies with One Cool Trick and evaluates key implications for security practitioners.
dependenciesprotectyourself+2
The Linux Foundation·24 min
Discusses purl and Vers: The Mostly Universal Package URL & Version Ranges Identifiers for Dependencies & and evaluates key implications for security practitioners.
dependenciespurlver+2
The Linux Foundation·42 min
Guy Bar Gil · Rhys Arkins
Provides sponsored Session: Dependencies: Dos and Donts and evaluates key implications for security practitioners.
dependenciessponsoreddependencie+2
The Linux Foundation·39 min
Xueqin Cui · Michael Kedar
Discusses trials and Tribulations of Updating Dependencies for Vulnerability and evaluates key implications for security practitioners.
dependenciestrialtribulation+2
The Linux Foundation·31 min
Xavier Claessens
Evaluates tutorial: Honey, practitioners Shrunk GStreamer: Using Meson to Slim Down Dependencies and evaluates key implications for security practitioners.
dependenciestutorialhoney+2
The Linux Foundation·29 min
Reviews using CHAOSS Metrics, Models, and Software to Identify the Most Significant At-Risk Dependencies and evaluates key implications for security practitioners.
dependencieschaosmetric+1
RSAC Cybersecurity·51 min
Engineers explore architecture and security mechanisms for Breaking Password Dependencies: Challenges in the Final Mile at Microsoft.
dependenciesbreakingpassword+3
geecon conference·26 min
GeeCON 2018: Peter Palaga - srcdeps - stop letting dependencies dictate your life!.
dependenciespeterpalaga+1