Have you considered what truly separates accidental vulnerabilities in open source from intentionally malicious releases? Although often grouped together as "vulnerabilities", malicious open source components are very different, right from their very creation through to the way you mitigate and remediate them as an end user. The past 12 months saw a record-breaking time for detection of malicious components in the world's most popular package registries.

Join Rhys Arkins, Director of Product at WhiteSource, as he will discuss:

The key differences between accidental vulnerabilities and malicious releases,
How to manage the risk for each type of vulnerability,
Lessons learned from the most interesting malicious packages spotted during 2019.

свернуть