Towards Effective & Scalable Vulnerability Management

Common Ground, 10:30 Tuesday While the security landscape is constantly changing, our approach toward vulnerability management hasn’t changed much over the last couple of decades. The increasing reliance on third-party code, the growing number of v...

Common Ground, 10:30 Tuesday

While the security landscape is constantly changing, our approach toward vulnerability management hasn’t changed much over the last couple of decades.

The increasing reliance on third-party code, the growing number of vulnerabilities being discovered, as well as the increased visibility into our software stack in the advent of Log4Shell and the adoption of SBOM, make a more effective and scalable vulnerability management paradigm a necessity.

What would such a paradigm look like?

Join me in this interactive discussion as we’ll explore the challenges of vulnerability management and highlight potential solutions. We’ll discuss current frameworks and standards that can help address this issue, such as CSAF and VEX, and demonstrate how once adopted, they can be used towards automating many aspects of vulnerability management which today are manual and extremely time-consuming.

We’ll explore how to use exploitability as a strong signal for prioritization, and how automation can play a crucial role in making vulnerability management more effective and scalable. By the end of this talk, you’ll have a deeper understanding of vulnerability management and practical insights on how to improve your organization’s security posture. Let’s explore the future of vulnerability management together!

Yotam Perkal