This course teaches learners how to adopt a counterintuitive approach to security by disregarding over 90% of security vulnerability alerts. Through specific examples, participants will learn how to confidently ignore certain alerts, leading to a significant transformation in security workflows and practices. The intended audience for this course includes security professionals and individuals interested in enhancing their security strategies.
When is a Vulnerability Not a Vulnerability? Overcoming the Inundation of Noisy Supply Chain Security Alerts
Security BSides San Francisco via YouTube
Overview
Syllabus
BSidesSF 2023 - When is a vulnerability not a vulnerability? Overcoming the... (Adam Berman)
Taught by
Security BSides San Francisco
Related Courses
-
When a Zero Day and Access Keys Collide in the Cloud - Responding to the SugarCRM 0-Day Vulnerability
-
What Does it Mean to Build a Proactive Security Culture in an Organization
-
How to Treat Your 'Hacker' and Responsible Vulnerability Disclosure
-
A Proposed Process for Handling Vulnerability Information
-
Enterprise Vulnerability Management - Assessing, Implementing, and Maintaining
-
Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt
