Insecure Execution: Attacking the Cloud Native Supply Chain with Andrew Martin
Should we trust the code we run in production? Not if a motivated attacker can compromise our system’s complex supply chains. While hardened runtimes and detection can mitigate some zero day attacks, malicious internal threat actors and software implants are much harder to detect.
Supply chain security looks to address some of these concerns, but with so many signing options available to us, what do we really care about?
Related events & webinars
View allOpen Source Tools To Empower Ethical and Robust AI Systems - Vicente Herrera & Alberto Rodríguez Fernandez, Control Plane
In this talk, Vicente Herrera will show us some open source tools for evaluating and securing AI models that are essential to building responsible AI systems. He will present an ontology explaining where each tool can assist in these tasks.
Hack & Snack – Beer, Pizza & DevSecOps!
Hosted by DevSecCon & ControlPlane at the Snyk Office on October 24th
Is the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities - Andrew Martin, ControlPlane & Michael Lieberman, Kusari
Open source is deployed everywhere, but is no longer trusted by default. Supply chain attacks via package registries, GitHub, and various accidental and entirely understandable vulnerabilities have proven that nothing is entirely secure.
Speak to an expert
Engage with world-leading AI and cloud security specialists