Finding Zero Days Before The Attackers: A Fortune 500 Red Team Case Study
iSpeech.org
Graph databases offer security teams a new and more efficient way to find zero day vulnerabilities. As software development increases its reliance on open source libraries and release cycles get faster and faster application security is becoming more and more difficult. AppSec still has the same charter -- to find vulnerabilities in dev, before they reach prod, but now with more complexity and less time. Graphing source code, and traversing it to identify technical and business logic vulnerabilities, gives AppSec teams a much needed leg up identify zero days and stay ahead of attackers.
As numerous famous examples demonstrate, open source libraries are a common attack vector. Hence, AppSec teams must secure 3rd party dependencies just as vigorously as custom code. While much of the emphasis for securing open source libraries (OSS) has been on identifying and eliminating known CVEs, because OSS is widely used, zero-day vulnerabilities are often more likely to be found in popular OSS than custom code.
This webinar will cover the following:
An introduction to the emerging graph landscape and why it matters for AppSec
How a Fortune 500 company is using graphs to find zero days
Technical demo of finding technical and business logic vulnerabilities in source code
source
Gloss