Open Source, Security, and Open Source Security.pdf

•

0 likes•2 views

egypt

Presented at: LASCON, 2016; Dakotacon, 2017

Software

@egyp7
Open Source,
Security, and
Open Source Security
@egyp7
1

@egyp7
James Lee
@egyp7
Metasploit Developer
Community Manager
$ whoami
2

@egyp7
Goals
Motivations
Difficulties
4
Solutions

@egyp7
Goals of OSS
Produce high-quality programs
Share work
Democratize code
7

@egyp7
Why do people work
on Open Source?

@egyp7
Difﬁculties of OSS
Getting users
Getting contributors
Having users and contributors
14

@egyp7
Goals of Security
Identify risks
Quantify
Mitigate
Report
18

@egyp7
Difﬁculties of Security
As a pentester
● Reporting
As an administrator
● Budget, resources
26

@egyp7
Goals of Open Source Security
Standardize and categorize vulnerability
Democratize security
29

@egyp7
Difﬁculties of OSS Security
Most people are not programmers
30

@egyp7
Language hacks
Say thanks
Avoid “simply”, “just”, “easy”
Use smileys
33

@egyp7
Questions
egypt@metasploit.com
@egyp7

Similar to Open Source, Security, and Open Source Security.pdf

200109-Open AI Chat GPT.pptxAnkurGuputa

Open AI Chat GPT.AtharvaKrishnaSingh

Even An Old Elephant Can Learn To DanceTim Tyler

Practical AI & data science ethicsStephanie Locke

Kim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6aGene Kim

Getting your idea into Upstream OpenStack - FOSDEM 2016John Garbutt

Dsdt meetup may1JDA Labs MTL

DSDT Meetup May 2018DSDT_MTL

Piwik Retrospective 2008Matthieu Aubry

Sep 27 2007 San Jose Event P AmeryPhil Wolff

Goodle Developer Days Munich 2008 - Open Social UpdatePatrick Chanezon

Stop Security by Sleight Of Hand.pptxSteve Poole

Epic #SEOisAEO series: Semantic HTML5, IA and Accessibility - so many missed ...Anton Shulke

SIM RTP Meeting - So Who's Using Open Source Anyway?Alex Meadows

Gamify your soulLeo Sorge

How to start an open source project slides-dec2016Dirk Frigne

Software as CraftNicole Forsgren

Open AI Chat GPT OpenAI LP and its parent company, the non-profit OpenAI Inc...skbkar98

200109-Open AI Chat GPT.pptxAnirbanMukherjee256296

The OSGeo Foundation: Professionally Leveraging Open Source GeospatialArnulf Christl

Similar to Open Source, Security, and Open Source Security.pdf (20)

200109-Open AI Chat GPT.pptx

Open AI Chat GPT.

Even An Old Elephant Can Learn To Dance

Practical AI & data science ethics

Kim itSMF New England: ITIL at Ludicrous Speeds - Rugged DevOps 6a

Getting your idea into Upstream OpenStack - FOSDEM 2016

Dsdt meetup may1

DSDT Meetup May 2018

Piwik Retrospective 2008

Sep 27 2007 San Jose Event P Amery

Goodle Developer Days Munich 2008 - Open Social Update

Stop Security by Sleight Of Hand.pptx

Epic #SEOisAEO series: Semantic HTML5, IA and Accessibility - so many missed ...

SIM RTP Meeting - So Who's Using Open Source Anyway?

Gamify your soul

How to start an open source project slides-dec2016

Software as Craft

Open AI Chat GPT OpenAI LP and its parent company, the non-profit OpenAI Inc...

200109-Open AI Chat GPT.pptx

The OSGeo Foundation: Professionally Leveraging Open Source Geospatial

Recently uploaded

buds n tech IT solutionsmonugehlot87

The Evolution of Karaoke From Analog to App.pdfPower Karaoke

EY_Graph Database Powered SustainabilityNeo4j

What is Fashion PLM and Why Do You Need ItWave PLM

Automate your Kamailio Test Calls - Kamailio World 2024Andreas Granig

(Genuine) Escort Service Lucknow | Starting ₹,5K To @25k with A/C 🧑🏽‍❤️‍🧑🏻 89...gurkirankumar98700

Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...stazi3110

Engage Usergroup 2024 - The Good The Bad_The UglyFrank van der Linden

办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样umasea

XpertSolvers: Your Partner in Building Innovative Software SolutionsMehedi Hasan Shohan

Try MyIntelliAccount Cloud Accounting Software As A Service Solution Risk Fre...MyIntelliSource, Inc.

ODSC - Batch to Stream workshop - integration of Apache Spark, Cassandra, Pos...Christina Lin

Alluxio Monthly Webinar | Cloud-Native Model Training on Distributed DataAlluxio, Inc.

Professional Resume Template for Software DevelopersVinodh Ram

Der Spagat zwischen BIAS und FAIRNESS (2024)OPEN KNOWLEDGE GmbH

What are the features of Vehicle Tracking System?Watsoo Telematics

Call Girls In Mukherjee Nagar 📱 9999965857 🤩 Delhi 🫦 HOT AND SEXY VVIP 🍎 SE...Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

Unit 1.1 Excite Part 1, class 9, cbse...aditisharan08

cybersecurity notes for mca students for learningVitsRangannavar

Asset Management Software - InfographicHr365.us smith

Recently uploaded (20)

buds n tech IT solutions

The Evolution of Karaoke From Analog to App.pdf

EY_Graph Database Powered Sustainability

What is Fashion PLM and Why Do You Need It

Automate your Kamailio Test Calls - Kamailio World 2024

(Genuine) Escort Service Lucknow | Starting ₹,5K To @25k with A/C 🧑🏽‍❤️‍🧑🏻 89...

Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...

Engage Usergroup 2024 - The Good The Bad_The Ugly

办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样

XpertSolvers: Your Partner in Building Innovative Software Solutions

Try MyIntelliAccount Cloud Accounting Software As A Service Solution Risk Fre...

ODSC - Batch to Stream workshop - integration of Apache Spark, Cassandra, Pos...

Alluxio Monthly Webinar | Cloud-Native Model Training on Distributed Data

Professional Resume Template for Software Developers

Der Spagat zwischen BIAS und FAIRNESS (2024)

What are the features of Vehicle Tracking System?

Call Girls In Mukherjee Nagar 📱 9999965857 🤩 Delhi 🫦 HOT AND SEXY VVIP 🍎 SE...

Unit 1.1 Excite Part 1, class 9, cbse...

cybersecurity notes for mca students for learning

Asset Management Software - Infographic