Senior Security Solutions Manager Black Duck, United States
Log4Shell, SolarWinds, CodeCov and the npm package repository are all associated with some type of software supply chain risk or incident, but each represent completely different attack vectors. As we depend more on build and release automation and third-party dependencies, we need to better understand how threat actors exploit those to attack the consumers of our software. In this Learning Bytes session, you’ll learn: • The riskiest points of your software development lifecycle • The four most common supply chain attacks, with real world examples • How to create a firewall around our software supply chain to protect your software and your customers
