))
Beyond Identity: Software Supply Chain Attacks and the Best Defence
Manage episode 343269381 series 2548283
İçerik EM360 tarafından sağlanmıştır. Bölümler, grafikler ve podcast açıklamaları dahil tüm podcast içeriği doğrudan EM360 veya podcast platform ortağı tarafından yüklenir ve sağlanır. Birinin telif hakkıyla korunan çalışmanızı izniniz olmadan kullandığını düşünüyorsanız burada https://tr.player.fm/legal özetlenen süreci takip edebilirsiniz.
A software supply chain attack is when someone infiltrates your system by attacking a third-party provider or partner with access to your data.
Recent high-profile supply chain attacks, most notably SolarWinds, has this type of attack into the public eye, and it’s clear that with more suppliers handling sensitive data than ever before, the attack surface of a typical enterprise has been changed dramatically.
In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Suresh Bhandarkar, Director of Product Solution Architecture at Beyond Identity, to discuss:
- Software supply chain attacks
- Weaknesses in the CI/CD pipeline
- The issue of software code provenance
Beyond Identity cuts through the anonymity of to provide a secure, scalable way for development and GitOps teams to immutably sign and verify the author of every commit. Their author verification API in proves that what you’ve shipped is what your developers actually built—and that nothing else got added.
211 bölüm
Paylaş
