Detecting 3rd Party App Security Characteristics and Changes Made to the Attack Surface

Tools (716AB) October 10, 2019 10:15 am - 11:15 am Feedback     

Bookmark and Share

Guy Acosta

Most 3rd party software installations require elevated privileges that could lead to reduced security in the attack surface of your client and enterprise systems. Knowing what is in 3rd party open source software succinctly and detecting changes made during installation and at runtime can inform risk choices about what you should allow on your systems and the level of trust that should be granted as well as ensuring compliance to SDL requirements. We’ll explore the value and benefits of Microsoft’s free security tools including the new Attack Surface Analyzer 2.0 and AppInspector 1.0 and how they can help and be integrated into your DevOps pipeline.