<img src="https://certify.alexametrics.com/atrk.gif?account=8w5fq1Fx9f207i" style="display:none" height="1" width="1" alt="">

Webinar

Think About Your Audience Before Choosing a Webinar Title

Sponsored by:

Deepfactor_FullLogo_RGB_2C full color

 

On Demand
Anytime

Picture this: Your application is composed of 12 Docker containers. Together, they have 400 packages. Your SCA scan detects 120 critical and high vulnerabilities. Your dev team doesn’t have the cycles to fix all of them in time. How do you identify which vulnerabilities truly represent higher risk?

In this hands-on workshop, introduced by Deepfactor founder & CEO, Kiran Kamity, Deepfactor's VP of Engineering, Rizwan Merchant and our Director of Product Engineering, Vikas Wadhvani, will walk you through the process of using runtime analysis to identify which vulnerable components in an application are actually loaded into memory and, therefore, represent a higher risk to your business. You’ll learn how to be a hero in your organization by helping your dev teams save time and fix a significantly smaller number of high-risk vulnerabilities!

The workshop includes:

Intro to ‘Next-gen SCA’

  • Why traditional static SCA approaches are outdated
  • How to cut down this noise with runtime analysis
  • How ‘Runtime SCA’ can result in risk-based prioritization
  • How ‘Runtime SCA’ can help organizations approach new zero-days more maturely

Hands-on session

  • Scan sample container artifacts to obtain list of CVEs
  • Observe running applications with a simple command to identify which modules actually got loaded into memory
  • Correlating SCA scans with runtime analysis to identify the intersection between what is vulnerable, exploitable, used and reachable.
  • Review dependency scans using an example application with a vulnerable version of Log4j and identify high-risk instances of Log4j based on runtime usage and reachability.
  • Identify which classes within Log4j were actually loaded into memory
  • Review container scans using an example of the recent OpenSSL vulnerability
  • Identify high-risk instances of OpenSSL based on which shared objects within the vulnerable version of OpenSSL were loaded into memory
  • Review findings and remediation guidance
  • Receive self-directed “homework” for the morbidly curious!

Key Takeaways:


  • Receive homework to help you use Deepfactor with your own applications
  • Receive an in-depth introduction to a new AppSec tool delivered by the VP of Engineering who built it
  • You'll learn a new way to prioritize alerts based on those that are used and address first, reducing noise

WHAT TO BRING:

  • We’ll have a VM with all the tools ready for you. No prep needed. Just get your Windows/Mac laptop, some coffee and your enthusiasm!
Rizwan Merchant
VP of Engineering - Deepfactor
Rizwan is a seasoned engineering leader at the intersection of DevOps and security. He has played key roles at companies like Qualys and FireEye. Enjoys the outdoors and biking.
Kiran Kamity
Founder & CEO - Deepfactor
Kiran Kamity is a serial Silicon Valley entrepreneur with a passion for building products that meet a need and make a business impact—with Deepfactor that’s empowering engineering teams to create secure cloud native applications. Prior to Deepfactor, Kiran was the Head of Product at Cisco Cloud BU, Founder/CEO at ContainerX (acquired by Cisco), and the Founder/VP at RingCube (acquired by Citrix). Kiran is a TEDx speaker and loves nature, travel, and food. 
Vikas Wadhvani
Director of Product Engineering - Deepfactor
Vikas Wadhvani is a product and engineering leader who has built software products from scratch in diverse domains such as video conferencing, events streaming, augmented and virtual reality and application security.

Register to Watch Now:

What You’ll Learn in This Webinar

You’ve probably written a hundred abstracts in your day, but have you come up with a template that really seems to resonate? Go back through your past webinar inventory and see what events produced the most registrants. Sure – this will vary by topic but what got their attention initially was the description you wrote.

Paint a mental image of the benefits of attending your webinar. Often times this can be summarized in the title of your event. Your prospects may not even make it to the body of the message, so get your point across immediately.  Capture their attention, pique their interest, and push them towards the desired action (i.e. signing up for your event). You have to make them focus and you have to do it fast. Using an active voice and bullet points is great way to do this.

Always add key takeaways. Something like this....In this session, you’ll learn about:

  • You know you’ve cringed at misspellings and improper grammar before, so don’t get caught making the same mistake.
  • Get a second or even third set of eyes to review your work.
  • It reflects on your professionalism even if it has nothing to do with your event.