Software Supply Chain Security with Michael Lieberman
Podcast: Play in new window | Download
Subscribe: RSS
One of the most famous software exploits in recent years was the SolarWinds attack in 2020. In this attack, Russian hackers inserted malicious code into the SolarWinds Orion system, allowing them to infiltrate the systems of numerous corporations and government agencies, including the U.S. executive branch, military, and intelligence services.
This was an example of a software supply chain attack, which exploits interdependencies within software ecosystems. Software supply chain security is a growing issue, and is particularly important for companies that rely on large numbers of open source dependencies.
Michael Lieberman is the Co-Founder and CTO of Kusari and has an extensive background in software security from his time at Citi Bank, MUFG and Bridgewater. He’s also active in the open source and security communities, including the Open Source Security Foundation and Cloud Native Computing Foundation. Michael joins the show today to talk about challenges and strategies in software supply chain security.
Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk.
Please click here for the transcript of this episode.
Sponsorship inquiries: sponsor@softwareengineeringdaily.com
Sponsors
An award-winning strategic partner of AWS, Google Cloud and Microsoft Azure, DoiT works alongside more than 3,000 customers to save them time and money.
Turbocharge your growth and optimize your cloud investment so you can concentrate on what you’re good at – quickly growing your business. Learn more at doit.com.
