Overview
Explore the critical topic of software supply chain security in this 48-minute conference talk from LASCON. Delve into the limitations of traditional vulnerability scanning tools and learn why they are insufficient in detecting malware. Examine high-profile cases like SolarWinds, Kaseya, and 3CX to understand the impact of software supply chain attacks. Discover innovative approaches to analyzing software behaviors for identifying potential malware and preventing supply chain attacks. Investigate the challenges of distinguishing between acceptable and malicious behaviors in diverse software applications. Gain insights into automating behavior analysis to keep pace with DevOps practices. Equip yourself with advanced knowledge to enhance your organization's defense against sophisticated cyber threats.
Syllabus
Dave Ferguson - Beyond Vulnerabilities: Analyzing Behaviors to Spot Malware in Your Release
Taught by
LASCON