Software Supply Chain Attacks Courses and Certifications

OpenSSF

The Simple Yet Lethal Anatomy of a Software Supply Chain Attack

Explore software supply chain vulnerabilities through an attacker's lens, examining open-source security flaws and defense strategies with practical demonstrations and countermeasures.

• YouTube
• 34 minutes
• On-Demand
• Free Video

DevSecCon

Software Supply Chain Attacks - Understanding Risks and Prevention

Explore software supply chain attacks: their nature, prevalence, types, recent examples, and best prevention practices. Gain insights into associated risks and protective measures.

• YouTube
• 54 minutes
• On-Demand
• Free Video

RSA Conference

Whom Do You Trust - MSPs and Other Forgotten Risks for SMBs

Explore cybersecurity risks for SMBs, focusing on MSP vulnerabilities and supply chain attacks. Learn strategies to protect against threats and strengthen your security posture.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

The Evolution of the Software Supply Chain Attack

Join Ilkka as he shares the proprietary research gathered from 36,000 OSS projects and 5,000+ development teams. Ilkka will walk through how hackers are becoming more successful at breaching Software Supply Chains and what you can do about it.

• Pluralsight
• On-Demand
• Free Trial Available

BSidesLV

Code Dependency - Chinese APTs in Software Supply Chain Attacks

Explore Chinese APTs' tactics in software supply chain attacks, examining notable incidents, code breakdowns, and open-source vulnerabilities to understand and mitigate these sophisticated threats.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

Controlling the Source - Abusing Source Code Management Systems

Explore vulnerabilities in Source Code Management systems, including reconnaissance, user role manipulation, and repository takeover. Learn attack scenarios and defensive strategies for GitHub, GitLab, and Bitbucket.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

GOTO Conferences

Adapting DevOps in a World of Growing Software Supply Chain Attacks

Explore DevSecOps strategies to combat rising software supply chain attacks. Learn about vulnerabilities, prevention techniques, and essential rules for securing your development pipeline.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

The Rise of Software Supply-Chain Attacks - How Secure is Your .NET Application

Explore software supply chain vulnerabilities in .NET applications, from infrastructure to CI/CD pipelines. Learn to identify and mitigate security risks across the development lifecycle.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

The Rise of Software Supply-Chain Attacks - How Secure is Your .NET Application

Explore software supply chain vulnerabilities in .NET applications, from infrastructure to CI/CD pipelines. Learn to identify and mitigate security risks across the development lifecycle.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

A Critical Assessment of Supply Chain Intrusion Vectors

Critical analysis of supply chain attacks, distinguishing between modification and third-party compromise. Explores functionality, execution, and defensive measures, providing insights for risk assessment and mitigation strategies.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

CAE in Cybersecurity Community

AI and Cybersecurity - The Twain Shall Meet

Explore AI's role in cybersecurity, focusing on advanced persistent threats, intrusion detection systems, and vulnerability analysis using ontologies and reasoning techniques.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Dynamic Image Scanning Through System Tracing

Explore dynamic scanning for detecting sophisticated malware through system tracing. Learn about behavioral patterns, open-source tools, and comparisons with static scanning and runtime security.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Struts2 Vulnerability Workshop - Securing Applications Against Supply Chain Attacks

Explore software supply chain attacks, open source vulnerabilities, and security measures in modern development practices through hands-on exercises and real-world examples.

• YouTube
• 32 minutes
• On-Demand
• Free Video

IEEE

SoK - Taxonomy of Attacks on Open-Source Software Supply Chains

Comprehensive taxonomy of attacks on open-source software supply chains, analyzing vulnerabilities and providing insights for enhanced security measures in software development ecosystems.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

Analysis of and Lessons from the Xz-Utils Vulnerability - What Might Come Next

Delve into the technical analysis of the xz-utils vulnerability incident, exploring the combined attack techniques, social engineering aspects, and future implications for open-source software security.

• YouTube
• 40 minutes
• On-Demand
• Free Video