Loading…
December 14 - 15, 2021 | Virtual Event
View More Details for Open Source Summit
View More Details for Automotive Linux Summit
Register for OSS + ALS Japan

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Japan + Automotive Linux Summit to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Japan Standard Time (UTC+09:00). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change.
Back To Schedule
Tuesday, December 14 • 14:30 - 15:20
Stranger Danger: Finding Security Vulns Before They Find You! - Steven Developersteve Coochin, Snyk

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
Open-source modules and the ecosystem are undoubtedly awesome. However, they also represent an undeniable and massive risk. You’re introducing someone else’s code into your system, often with little or no scrutiny. The wrong package can introduce critical vulnerabilities into your application, exposing your application and your user's data. This talk will use a sample application, Goof, which uses various vulnerable dependencies, which we will exploit as an attacker would. For each issue, we'll explain why it happened, show its impact, and – most importantly – see how to avoid or fix it.

Speakers
avatar for Steve Coochin

Steve Coochin

Senior Developer Advocate, Snyk
Senior Dev Advocate @Snyksec, @Barayamal3 advisor. Prev @IBMDeveloper @telstradev @XeroAPI @PayPalDev. Dev/CTO/Maker/Geek/Speaker/MC/Hackathoner.


Tuesday December 14, 2021 14:30 - 15:20 JST
OS Dependability Theater