DevSecOps Supply Chain Defense - Securing Software Development Pipelines Against Modern Threats

Learn to defend against software supply chain attacks in this 24-minute conference talk from Conf42 DevSecOps 2025. Explore the critical threat landscape facing modern software development and examine real-world examples of supply chain compromises that have impacted organizations worldwide. Discover how supply chain attacks have evolved and understand the comprehensive defense framework needed to protect your development ecosystem. Master the implementation of resilient DevSecOps practices, including securing CI/CD pipelines, deploying advanced threat detection mechanisms, and implementing Runtime Application Self-Protection (RASP) technologies. Gain insights into effective vendor risk management strategies and learn how to architect zero trust security models for your development environment. Follow a practical, actionable roadmap for establishing robust supply chain security measures that can be immediately applied to strengthen your organization's defensive posture against sophisticated supply chain threats.

Syllabus

00:00 Introduction and Speaker Background
00:34 Understanding Software Supply Chain Attacks
01:10 Critical Threat Landscape
03:36 Real-World Examples of Supply Chain Attacks
05:18 Defense Framework Overview
06:44 Evolution of Supply Chain Attacks
11:24 Building Resilient DevSecOps Practices
12:23 Securing the CICD Pipeline
14:16 Advanced Threat Detection
15:25 Runtime Application Self-Protection
17:00 Vendor Risk Management
18:52 Zero Trust Architecture
20:20 Actionable Roadmap for Supply Chain Security
22:09 Conclusion and Key Takeaways