Скачать или смотреть Securing Open Source Through Threat Modeling - Aviv Sasson & Daniel Prizmant, Palo Alto Networks

Securing Open Source Through Threat Modeling - Aviv Sasson & Daniel Prizmant, Palo Alto Networks

In this session, Aviv and Daniel will talk about securing code through threat modeling - The art of identifying attack surfaces. They will explain what is threat modeling, why it's beneficial and even essential when it comes to open source projects, and why attackers use it in order to find vulnerabilities. They will elaborate on how to threat model in order to find security flaws and will demonstrate the process while diving into the technicalities. They will highlight the value of this process by sharing how he found certain vulnerabilities in open source projects by using this method, such as with Harbor and Nats. Finally, They will provide statistics about how vulnerabilities were found in some major open source projects by this process.