Strategies for Improving Enterprise Application Security - a WhiteSource Webinar

Which steps should enterprises take to build stronger security into the app development process?

1. Top 3 Open Source Security Myths Debunked

2. Open Source Components Account for 60%-80% Of The Average Software Product

3. Ask Yourself: Are your processes equipped to detect open source vulnerabilities and remediate them?

4. Myth#1 Debunked: Security And Agility Are Not Mutually Exclusive SHIFT LEFT the process to minimize the number of security vulnerabilities - and maximize agility. MITIGATE - RATHER THAN JUST REACT Late Detection of Vulnerabilities & Bugs is EXPENSIVE

5. Myth#2 Debunked: Security Responsibilities Can Be Delegated Empower developers with more flexible selection and approval processes Selection Release Documentation Detection Support Alerting Reporting Policy

6. Myth#3 Debunked: Security Vulnerabilities Can Be Prioritized 70 % of reported security vulnerabilities in open source libraries are not referenced by the developers’ code. * Based on preliminary research by WhiteSource ~

7. Improve Enterprise Application Security Beyond Mere Automation Shift-left security processes to establish better practices Streamline policies with better integration options Analyze and prioritize open source security vulnerability remediation

8. Thank You