Principal/Distinguished Digital & Cyber Technologist Booz Allen Hamilton, United States
Separate facts from fears for a comprehensive understanding of the strengths and weaknesses of open source software (OSS). The Log4J issue grew awareness and raised concerns about the cybersecurity risks associated with OSS. Not only was the software widely adopted, it had worldwide code contributors and no centralized support. C-level executives were concerned to learn there wasn’t a single source to hold contractually responsible. Cybersecurity professionals realized that Log4J exposed weaknesses related to the lack of rapid and complete understanding of all underlying software package dependencies. In this session, you’ll learn to navigate the real-world complexities in identifying and tracking the associated risks of OSS.
Learning Objectives:
Discuss the history of open source software, including who contributes to it and where the code is today.
Discover and control the use of open source software in your organization.
Assess the real-world complexities in identifying and tracking the pedigree and associated risks of open source software.