The code you didn't write - invisible threats in modern software development
Jeff Apolis
Wed
14 Oct
2:30 pm
-
3:10 pm
Room 104
Building Secure Technology
Software and Application Security
Most of an application's attack surface now comes from dependencies nobody on the team wrote or vetted, and traditional CVE scanning alone can't catch it.
