Slaying the Dragons - A Security Professional's Guide to Malicious Packages
Security BSides San Francisco via YouTube
Overview
Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore how attackers exploit software supply chains through typosquatting, author impersonation, and sophisticated malware campaigns in this 44-minute conference talk from BSidesSF 2025. Discover the tactics cybercriminals use to infiltrate package repositories and compromise software distribution channels. Learn practical threat hunting methodologies specifically designed to identify malicious packages before they can cause damage to your organization. Master step-by-step detection techniques for analyzing suspicious packages and understanding their potential impact. Develop comprehensive defense strategies to protect your software supply chain from these evolving threats. Gain actionable insights into building robust security controls that can effectively identify and mitigate package-based attacks across different programming ecosystems.
Syllabus
BSidesSF 2025 - Slaying the Dragons: A Security Professional’s Guide to...(Kirill Boychenko)
Taught by
Security BSides San Francisco