Navigating the Challenges of Risk-Based Vulnerability Management in a Cloud-Native World

Learn how to navigate the complex challenges of implementing risk-based vulnerability management in modern cloud-native environments through this 52-minute conference talk from LASCON. Explore the fundamental shifts in cybersecurity that have emerged since 2015 with the rise of containerized environments and modern software development practices, and discover how these changes have created unprecedented challenges in vulnerability management regarding scale, complexity, and data consistency. Examine strategies for overcoming fragmented and siloed security data that often hampers effective vulnerability prioritization, including methods to consolidate and normalize data from disparate tools and environments to create a unified decision-making view. Master innovative approaches for managing vulnerabilities in sprawling, dynamic infrastructures through automated prioritization and remediation workflows specifically designed for containerized and serverless architectures. Understand how reachability analysis can revolutionize vulnerability management by contextualizing vulnerabilities within software supply chains and runtime environments to focus resources on the most critical risks. Gain practical insights from two industry experts who share real-world use cases and practitioner-to-practitioner stories about scaling vulnerability management across organizations while bringing code, cloud, and traditional attack paths under a single comprehensive view.