
Risky Biz Soap Box: How to measure vulnerability reachability
Risky Business
00:00
Navigating Malicious Package Detection
This chapter discusses the critical role of malicious package detection in relation to compliance standards and highlights the limitations of current CVE-focused practices. It emphasizes the need for Software Bill of Materials (SBOM) to identify not only malicious and deprecated packages but also to enhance security management of software dependencies.
Transcript
Play full episode