How to Score an A+ on C++ in Open Source Security - Seguridad Mania.com - España y América Latina

Software vendors and development teams that build their applications on low-level languages like C and C++ are aware of the complexity that comes along with using these versatile and adaptable languages. As such, most teams have processes in place to review code for security and quality issues. However, most teams are missing a glaring blind spot, and that’s the open source used in their applications. Despite making up 77% of the average application, open source can be difficult to track in C and C++ applications because of the lack of standardization around package manager use. Join us to learn how you can make open source risk management a part of your application security program. We will discuss: - How open source dependencies are used in C and C++ development - Security, quality, and IP compliance risk of untracked open source dependencies - How Black Duck SCA handles open source in C and C++ where others fall short