Dejan Bosanac - All you wanted to know about software vulnerabilities but were too busy to look into

Vulnerability discovery is one of the crucial aspects of software supply chain security. We want to know which of the components in our software projects are affected by certain vulnerabilities, are they exploitable and how severe exploits are. In this session, we will look behind the scene of software vulnerability management. Where is all the data coming from? What are the formats in which data is exchanged? And how to use them. ---------- ABOUT DEJAN: I’m a software engineer at Red Hat with an interest in open source and integrating systems. Over the years I’ve been involved in various open source communities tackling problems like: Software supply chain security, IoT cloud platforms and Edge computing, Enterprise messaging and integration ---------- Heapcon is a regional tech conference for software engineers and tech businesses, organized by Heapspace. https://heapcon.io Follow Heapcon on social media: Twitter:   / heapconf   LinkedIn:   / heapcon   Instagram:   / heapcon   Facebook:   / heapcon   Meetup: https://www.meetup.com/Heapspace/