A data driven approach to application security - Petter Kvalvaag & Kristian Reed

Alerts! Your dependencies have vulnerabilites. Your docker image has hundreds of them. Your cloud provider spews out security recommendations. Your source code management system wants to have a say, too. How do we deal with all these signals? In this session I will share our journey on this topic in Equinor. Starting with the problem of information overload from multiple sources, we move on to how we now collect, aggregate, join and analyze the data and shape them into actionable insights, both on a team level and company level. Check out our new channel: NDC Clips: @ndcclips Check out more of our featured speakers and talks at https://ndcconferences.com/ https://ndc-security.com/