Explore a data-driven approach to predicting and remediating software vulnerabilities in this conference talk from Converge 2017. Delve into the challenges of managing large-scale vulnerability assessments, learn about real-time analysis techniques, and understand attacker incentives. Discover strategies for prioritizing and addressing vulnerabilities when faced with millions of potential issues. Gain insights into retrospective analysis, predictive modeling, and future directions for improving software security.
Overview
Syllabus
Intro
Overview
Datadriven approaches
The problem
Retrospective
RealTime Analysis
Remediating
Attacker Incentives
I have 10 million vulnerabilities
Data
Predicting
Next Steps
Related Courses
-
Predicting Exploitability - Forecasts for Vulnerability Management
-
Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
-
Those Don't Matter! Effective Prioritization Through Exploit Prediction
-
How to Predict Which Vulnerabilities Will Be Exploited - Tudor Dumitras - USENIX Enigma Conference - 2019
-
The Devils in the Dependency - Data Driven Software Composition Analysis
-
Prove It! - Confronting Security With Data
