Ending Open Source Security Fatigue - Lessons from Major Vulnerabilities

Explore strategies for managing open source security vulnerabilities without causing organizational upheaval in this keynote address from All Things Open 2022. Dive into lessons learned from major security events like the Equifax breach, Log4j vulnerabilities, and Spring4Shell exploit. Discover how security, engineering, and operations teams can streamline countermeasures to maintain security and resilience without creating a fire drill for each new vulnerability. Gain insights on past approaches that have fallen short and learn practical solutions to reduce the headache of dealing with flaws in popular open source packages. Presented by Alyssa Miller of Epiq Global, this 17-minute talk aims to address and alleviate open source security fatigue in software development organizations.