DevOps Stage speaker · 2022

Vitaly Davidoff

Application Security Lead, JFrog

  • Israel
  • Talk language: English

Vitaly Davidoff (Application Security Lead, JFrog) gave the talk “What is "Supply Chain" attack? and How to Prevent it in DevOps Pipeline” at DevOps Stage 2022, held online on 7 October 2022.

About Vitaly Davidoff

JFrog is a DevOps company and my team is responsible to security of JFrog company. We are dealing with supply chain attacks all the time and created uniq knowledge of how to protect against these attacks as part of CI/CD

Vitaly has about 15 + years’ experience as a developer and more than 8 years in the application security field. Applications Products Security lead at JFrog TLV Israel. In this position he’s responsible to provide Application Security solutions for many products, including analyzing security risks in multidisciplinary systems according to the customer system characterization, defining required security controls to handle identified security threats, perform code and design reviews, threat modeling and many other activities. He holds CISSP and CSSLP certificates.

Talk

Talk · DevOps Stage 2022 · online · Stream B · 14:00 - 14:45

What is "Supply Chain" attack? and How to Prevent it in DevOps Pipeline

We will provide an overview of "Supply Chain" attacks types (what is it and why it so important). The second part of this talk will be about "how to" protect your software against using malicious 3rd party packages

Also on this site: Vitaly Davidoff (2018, 2019 and 2021)

From the DevOps Stage conference archive (2022). This site is not connected to that conference or its organizer — see our disclaimer. Speakers can ask for changes or removal via hello@devopsstage.com.