As Strong as the Weakest Link - Securing the Software Supply Chain

Explore the critical aspects of securing the software supply chain in this 25-minute DockerCon 2021 talk by Brendan O'Leary. Delve into recent high-profile supply chain attacks, including the SolarWinds and FireEye hacks, to understand their implications. Learn about dependencies, the components of a software supply chain, and the importance of production systems in the overall security landscape. Examine survey results from the DefSec Op Survey to gain insights into industry practices. Discover strategies for implementing a robust supply chain defense-in-depth approach to protect your organization from potential vulnerabilities and threats.