Practical Approach to Automate the Discovery and Eradication of Open-Source Software Vulnerabilities

This course aims to teach learners a practical approach to automate the discovery and eradication of open-source software vulnerabilities. The learning outcomes include understanding the risks associated with open-source components in web applications, identifying vulnerabilities at scale, and implementing strategies for effective remediation. The course covers skills such as building an open source vulnerability database, vulnerability triage, risk assessment, and security change campaigns. The teaching method involves a talk that describes real-world examples and provides insights into Netflix's approach to handling open-source vulnerabilities. The intended audience for this course includes software developers, security professionals, and individuals interested in cybersecurity and open-source software security.