))
Episode 62 — Open-Source Dependencies: Risk Management and Updates
Manage episode 505187668 series 3688683
المحتوى المقدم من Jason Edwards. يتم تحميل جميع محتويات البودكاست بما في ذلك الحلقات والرسومات وأوصاف البودكاست وتقديمها مباشرة بواسطة Jason Edwards أو شريك منصة البودكاست الخاص بهم. إذا كنت تعتقد أن شخصًا ما يستخدم عملك المحمي بحقوق الطبع والنشر دون إذنك، فيمكنك اتباع العملية الموضحة هنا https://ar.player.fm/legal.
Modern applications rely heavily on open-source libraries and frameworks, which can accelerate innovation but also expand the attack surface. In this episode, we analyze the risks associated with open-source dependencies, from unpatched vulnerabilities to malicious code injections by compromised maintainers. We explain why organizations must adopt practices such as Software Bill of Materials (SBOM) tracking, automated dependency scanning, and strict patching schedules.
We also explore how governance frameworks help control which libraries can be used, and how runtime monitoring can detect unexpected behaviors. On the CCSP exam, dependency management is often woven into application security scenarios, testing whether you recognize the importance of provenance and lifecycle management. By mastering this topic, you’ll be equipped to balance the agility of open-source with the rigor of cloud security requirements. Produced by BareMetalCyber.com.
99 حلقات
مشاركة
