Software Engineering Radio - the podcast for professional software developers

Episode 535: Dan Lorenc on Supply Chain Attacks

Oct 25, 2022
Ask episode
Chapters
Transcript
Episode notes
1
Introduction
00:00 • 2min
2
The Attack Surface of the Software Supply Chain
02:17 • 2min
3
The State of the Software Supply Chain
04:07 • 2min
4
Supply Chain Attacks Detected?
05:56 • 2min
5
Supply Chain Attacks - What Are the Top Attacks?
07:40 • 3min
6
Attacking Open Source Code on a Developer's Laptop
10:17 • 2min
7
Is Dependency Confusion Really a Threat?
11:55 • 2min
8
XYZ Credit Card Charge
14:20 • 2min
9
Stack Overflow Questions About SolarWinds
16:42 • 3min
10
What's the Role of Code Obfuscation?
19:17 • 2min
11
The Worst Form of a Vulnerability
21:39 • 2min
12
Java JVM
23:50 • 3min
13
How to Log a Malicious Password Into a JVM
26:57 • 2min
14
Compilers and Interpreters Are Not Enough to Secure a Compiler
28:48 • 2min
15
How the Log for J Was Exploited in the Wild?
31:01 • 3min
16
SolarWinds Compromide - An Attack Against Solar Winds
33:53 • 2min
17
Code Cache Attacks - What Are They?
36:02 • 4min
18
Is There a Malware Compromise on NPM?
39:35 • 2min
19
The Top 10 Lessons Learned From These Attacks
42:02 • 2min
20
Is There a Recursive Nature of Package Management?
43:46 • 5min