#24 Reducing Third-Party Security Risk in .NET Core Applications

When developing a .NET Core application a large portion of the application itself consists of external 3rd party dependencies which can be fetched from a package repository like Microsoft's NuGet. How do those opensource projects/dependencies deal with security problems? We do need to keep an eye on security updates done in order to not introduce any unnecessary security risks into our application but will that be sufficient? Finding and resolving security issues can take a lot of time and what about a compromised package in which a contributor has added functionality which has got malicious intent? There is definitely a away we can improve the above and do a better job! In this session we'll take a look at e.g. compartmentalization and API review/reduction of those dependencies in order to reduce the risk profile of our developed .NET Core Applications.
Intermediate Security

Den 2

15 lis 2019
Hall C 9:00 - 9:50

Jak se Vám líbila přednáška?

Respektujeme Vaše soukromí. Zpětná vazba je anonymní a slouží pouze ke zlepšování konferencí, které pořádáme.

Záznam přednášky

Ostatní přednášky přednášejících

Přednášející nemá žádnou další přednášku.