Synopsys Software Integrity Group provides integrated solutions that transform the way development teams build and deliver software, accelerating innovation while addressing business risk. Our industry-leading portfolio of software security products and services is the most comprehensive in the world and interoperates with third-party and open source tools, allowing organizations to leverage existing investments to build the security program that’s best for them. Only Synopsys offers everything you need to build trust in your software.

Gone are the days when you only had to worry about the code your developers are writing. Now you have to think about a complex supply chain, which includes everything from open source dependencies and APIs to containers, infrastructure-as-code, and CI/CD toolchains. Recent supply chain attacks, along with the U.S. executive order on cybersecurity, have organizations re-evaluating the security of their software supply chains. 

In this webinar, our expert panelists will discuss 
• Why securing your supply chain means more than having an accurate software Bill of Materials (SBOM)
• What the executive order and other initiatives mean for software producers and consumers
• What security and development teams need to do to manage new and evolving supply chain threats

Learn what you can do to enhance the security of your software supply chain. Register now.

Securing the Software Supply Chain: More Than Just an SBOM?

The past couple of years have seen major changes in the way applications are developed, deployed—and secured. They should accommodate these changes too. Are conventional security controls like SAST, DAST and pen test catering to the changing technology landscape? Do your existing controls support the new OWASP Top 10 requirements? Join us to hear from industry leaders about
 
· How the product security program should be modeled to cater to the new technology landscape
 
· Whether conventional approaches of securing software in the coding and testing phase meet the new OWASP Top 10 requirements
 
· What security controls are required in an end-to-end product life cycle

AppSec and the OWASP Top 10 2021

Software security, development velocity, and business risk are three things that keep security and development teams up at night. With lots of application security testing (AST) tools in play, how can you address the unique needs of each team while cost-effectively generating one source of record for automated and manual tests?

Join this live Synopsys webinar to understand how you can align your DevSecOps strategy to address security risks across all stages of the application lifecycle. We’ll cover:

• The AppSec challenges that organizations face today
• Why traditional AppSec testing leaves you vulnerable 
• How to tap into time and money saving testing strategies

Don’t miss this informative webinar. Register today.

Effective AppSec: Saving Time & Money Without Sacrificing Security or Velocity

Software is everywhere. And for organizations dependent on software, understanding and managing the software supply chain is vital. Changes to your software supply chain may have ripple effects for your business. How do you manage that?

Join us for this Synopsys webinar to learn why a software Bill of Materials (SBOM) is an important tool in managing your software supply chain. We’ll cover: 

• What an SBOM is and what role it plays in the supply chain
• How to efficiently manage the software supply chain
• What happens when something goes wrong with a link in the chain

Benefits of an SBOM Across the Software Supply Chain

AppSec teams often struggle to keep up with the rapid code releases produced by DevOps teams. Testing falls behind as development speeds up. Since slowing down development to suit security isn’t an option, what do you do? You centralize testing across development pipelines into a scalable, repeatable, and automated process.  This allows security to move at the speed of DevOps. 

Listen as Adrian Acuna discusses six ways an application security orchestration and correlation (ASOC) tool can benefit you. We'll cover:

- Why organizations continue to struggle with AppSec tool findings
- How centralized management and standardization of results helps everyone
- What ASOC actually does to support security AND development

6 Ways to Improve AppSec Accountability

Organizations are adopting DevOps to speed up software production, and building secure, resilient software means ensuring that application security can keep up with development. Critical software issues need to be identified and addressed at appropriate stage within the SDLC. But the complexity required to integrate security tooling, and the time it takes to test, triage, and remediate within these short production cycles, causes many DevSecOps initiatives to stall or fail. As a result, applications can be less than fully tested—and less than fully secure. 

Join us for this live Synopsys webinar to learn how organizations can build security into DevOps without sacrificing speed for security. We’ll cover how to

• Use AppSec test orchestration to run the right tests at the right time, minimizing impact on build and release pipelines
• Use application vulnerability correlation and prioritization to align remediation efforts with business risks
• Empower your developers to secure code as fast as they write it

Don’t miss this informative webinar. Register today.

Top 3 Ways to Build Security into DevOps

Software due diligence is all about identifying and mitigating risk, and with fast-moving deals, you need to be prepared to evaluate a target’s software quickly and effectively. Many organizations rely on outside legal counsel to get it right – and with good reason.

Join this live Synopsys webinar to understand how expert software due diligence legal counsel strategically deploys software audits to accelerate due diligence. We’ll cover:

• Where audits come up and why should you care about them
• Where an audit fits into the M&A transaction process
• How to “right size” an audit and strategically select code for auditing

Don’t miss this informative webinar. Register today.

Best Practices for Accelerating Software Due Diligence

The past two years have delivered major disruptions for supply chains. In 2020 alone supply chain disruptions were up 67%. If you find yourself fielding questions on what else you AppSec program is doing to keep the organization secure, this may be why. How you respond to those questions matters. While people like to hear you’re doing more, more isn’t better unless it’s done at the right time and place.

This upcoming webinar talks about the Building Security in Maturity Model (BSIMM) and how it measures your security program. With real data, you can have real conversations about what’s happening and what needs done. Tune in to hear how your peers are:
 
 • Learning how to translate risk into actionable data
 • Increasing their security capabilities for open source, cloud, and container security
 • Lending security resources, staff, and knowledge to DevOps practices

BSIMM12: Metrics Driven Software Security

As the popularity of cloud-native applications continues to surge, containers are becoming the preferred option to package and deploy these applications because of the agility and scalability they deliver. According to Gartner, “by 2022, more than 75% of global organizations will be running containerized applications in production.”

The popularity of containers has also attracted the attention of hackers who are constantly looking for new ways to exploit them. Containers expand an organization’s attack surface and increase the risk to the applications they house. A comprehensive approach for container security is required to mitigate the risk to containerized applications and infrastructure.

In this webinar, we’ll outline the essential elements required to secure your container environments, including:
• Understanding what containers are (and aren’t)
• How to look at container security holistically
• The top threats to container landscapes
• Relevant case studies

Container Security Essentials

Apache Log4j is a broadly used open source component within the Java community, making its recent zero-day vulnerability a major fire drill for countless development teams. As development teams scramble to find and patch the issue, due diligence teams are left wondering if the software they’re about to acquire is secure and how they can know for sure. 

Join Synopsys for a live webinar that explores why security vulnerabilities like Log4j introduce risk into a transaction, and what security audits can uncover in due diligence. We’ll cover

• Why it’s critical to uncover security risks
• What a security audit can teach you beyond vulnerability identification
• Best practices for software due diligence

Don’t miss this informative webinar. Register today.

Log4j, Security Risks, and M&A: Identifying Software Risk in Deals

Adam is a BSIMM assessor and has participated in many BSIMM measurements with Synopsys, also as a proponent of software security initiatives and has presented on that topic in several public forums with positive responses.

Adam has been a with Synopsys for six years, working briefly as a Sales Engineer with SIG products then taking on a Regional Sales Manager Role for two years where he consistently exceeded his target. Currently working as a Managing Consultant with the software security consulting team in London, in addition to measurements, Adam helps organisations daily with software security activities, be that architecting solutions to best fit their risk and needs or partnering with them to orchestrate delivery of Synopsys’ services.

Listen to our presentation and discover what activities are essential for building a successful SSI and what steps can be taken to drive a successful security program.

The Ultimate Guide: Reduce risk with your Software Security Initiative

Fuzzing is proven to be one of the most effective techniques for identifying security vulnerabilities. But many organizations struggle to capitalize on their fuzzing program and turn the findings into actionable results.
 
In this webinar, we'll show you effective strategies, using Defensics, that help organizations make fuzzing results reproducible, portable, and accessible to developers so they can implement fixes. We will cover:
 
• Ensuring reproducibility of fuzzing findings.
• Classifying the findings for prioritization.
• Package findings for developer remediation.
• Verifying remediation and closing the loop.
 
This session is aimed at organizations that are already familiar with fuzzing concepts or have a fuzzing program in place.

Fuzzing: Crossing The Gap From Anomaly to Action

Hiring and training the right staff with the right skills to manage an AppSec testing program is not only time consuming, it’s expensive. Is it even possible to build internal resources to keep pace in this dynamic environment?

Join the live Synopsys webinar to learn how you can leverage managed security testing services to cost-effectively extend your testing capabilities without sacrificing security. We’ll cover:

• The business case for managed security testing services in the era of the Great Resignation
• Doing more with less:  where you can extend your testing capabilities 
• What you should look for in a managed security testing provider

Don't miss this informative webinar. Register today.

The Great Resignation: Bridging the Gap on Your AppSec Team

The DevOps methodology has become very popular, and now the DevSecOps movement is on the rise. But DevSecOps can cause friction among software developers, application security teams, and operations teams because each team has its own roadmap, responsibilities, and priorities. 

It’s imperative to build an organizational culture that enables all three teams to work toward one final goal: to get application to production as quickly as possible with minimal quality and security issues. How can you make sure security doesn’t get left behind?

The answer is to shift from reactive security to proactive security. Instead of focusing on new ways to find bugs already in the codebase, you should address the root cause of bugs. And you can do that by building expertise and providing the information needed to prevent bugs from entering the codebase in the first place. Don't wait to fix security vulnerabilities until after they wreak havoc on your applications. Treat them like any other bug within your DevOps process.

This webinar provides actionable insight into these activities:

• DevSecOps challenges
• Industry trends
• Building security into your DevOps software development life cycle
• Integrating and scaling the right tools in the DevOps pipeline

How to Build Security into DevOps

Businesses of all sizes are utilizing the power of open source software. But using open source requires maintenance to avoid security, quality, and license compliance risks. Are you ready to take control of your open source? The 2022 “Open Source Security and Risk Analysis” (OSSRA) report looks at the state of open source use in over 2,400 codebases across17 industries.

Join us for this Synopsys webinar to get a look at the 2022 report results. Learn how teams can use the data to inform their overall open source governance plans. We’ll cover

• Why open source governance matters and the impact your business
• The latest developments in open source usage 
• Open source management strategies

Don’t miss this informative webinar. Register today.

2022 Open Source Insights and Trends

As the migration to the cloud continues at an unabated pace, the threats in the cloud are also increasing proportionally and evolving constantly. Data breaches, misconfiguration risks, weak identity and access management controls, insider threats, multicloud infrastructure, and increasing complexity are just a few of the many challenges that are common in cloud computing. 
 
Adding to the complexity of today’s cloud landscape is multiple cloud providers with different ecosystems and myriad services offering unique security controls. Migrating on-premises/private cloud IT infrastructures onto the public cloud only increases the challenge of ensuring cloud security.
 
In this webinar, learn the essential elements required to ensure security of your cloud environments.
• Setting the right cloud security strategy that suits your organization
• Deploying and operating cloud-based applications with adequate security controls in a secure infrastructure
• Ensuring container-level security
• Maintaining a good cloud security posture
 
In addition, hear success stories of how we helped tackle some clients’ cloud security challenges

Secure Your Cloud Environment from Evolving Threats

Many enterprises have split their security functions between first-line defences, where AppSec tooling and penetration testing traditionally fits, and the second-line defences that encompass their governance, risk, and compliance (GRC) teams. This organizational and functional split has resulted in a major disconnect between the evolution of GRC practices and AppSec. This is further exacerbated by the huge challenges of improving application security at scale across CI/CD pipelines, infrastructure-as-code files, containers, the cloud—the list goes on and on. 

Organizations have tried bridging the gap with manual spreadsheets, but they need a better way to track and correlate tooling, security testing, and risk assessment results. 

Join this webinar to learn how Synopsys customers and partners are using application security orchestration and correlation (ASOC) tools like Code Dx® and Intelligent Orchestration to bridge the gap between GRC and AppSec and get the answers to questions such as

• When was the software tested?
• What was found?
• What was fixed?
• How can I identify my most vulnerable software?
• What is the extent of my exposure and exploitability?

Rethinking GRC for Modern Software Development

Digital transformation initiatives are forcing development teams to make tough decisions. They have to make tradeoffs between feature velocity and managing application security risk. Developers may lack the knowledge to address the risks they’re aware of, and adding security tools often adds friction to their workflows. A new approach is needed to meet the demands of modern application development.

Join us for this webcast with Enterprise Strategy Group (ESG) to learn about:

- How DevOps and automation are changing application security landscape
- What challenges teams face when automating their AST tools
- How a new approach to DevSecOps can address these challenges
- What your team can do to make your DevSecOps initiative successful

Cracking the Code of DevSecOps

Numerous M&A transactions have recently been put on hold while the parties wait to see what happens. Travel bans, quarantines, social distancing, closures of nonessential businesses, and shelter-in-place orders make it impossible to conduct due diligence in a normal fashion. So how do you assess technology when no one can travel?
 
Join us for this webinar as we discuss what tech due diligence may look like in this new normal.  We’ll cover:

•Tips for managing software due diligence and audits in the current environment
•Setting realistic expectations and gaining insight from more limited information
•Leveraging tech due diligence providers and tech-focused legal counsel to minimize increased M&A risk
 
Don’t miss this informative webinar. Register today.

Managing Tech Due Diligence From a Social Distance

Mergers

Mergers and Acquisitions

Open Source

AppDev

Legal IT

Intellectual property law is crucial to ensuring that you or your organization have exclusive rights to that assets that you’ve created. The BrightTALK intellectual property community has thousands of professionals focused on learning and exchanging information about intellectual property management, intellectual property software and how to protect intellectual property. Join the community for access to free, interactive presentations or attend live webinars to have your questions answered by IP lawyers and industry experts.

Intellectual Property

The legal community on BrightTALK combines the fields of employment law, e-discovery, intellectual property and environmental law to create a thriving ecosystem of legal resources. Attend live and on-demand webinars dealing with employment contract law, e-discovery solutions, intellectual property software and sustainable development from leading lawyers and legal professionals to gain knowledge in a wide range of fields. Join the community and be part of the conversation by attending live legal webinars and connecting with industry thought leaders.

Legal

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

Get powerful market trends insights that are shaping the M

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Managing Tech Due Diligence From a Social Distance

Presented by

About this talk

More from this channel