The Apache Software Foundation has had a rough time recently. First there was the Log4j 0-day. Then the patch (2.15.0) they released for that had a vulnerability of its own. Not long after, two serious (one high, one critical) flaws in their web server project. Unsurprisingly, some have used these issues as an argument for why open source is less secure than commercial counterparts. If we’ve learned anything since the initial Log4j disclosure, it’s the importance of software integrity -- but software integrity is not achieved via exclusion of open source tools from enterprise use. Join this panel of industry experts who will debate the issues of software vulnerabilities, the challenges of software integrity, and the future of open source.
Broadcast on in Webcasts
Apr. 14, 2022 | Log4j, Apache, and the Future of Open Source Software
DevSecOps & Application Security Hackers & Threats Open Source Tools
application security DevSecOps exploit of vulnerability hackers & threats patch vulnerability & configuration management secure coding software code vulnerability analysis software integrity zero day vulnerability
Share With Your Community