Threat Intelligence and Hunting Summit

Modern Threat Intelligence practices are fundamentally driven by the availability of accurate data, gathered from a variety of sources. While many areas are well covered by the availability of both data gathering and analysis tooling - e.g. vulnerability scanning, exploitability analysis, blast radius, and more – there is a relatively untapped data and analysis category that serves the growing need for deeper intelligence to strengthen software supply chain security.

This presentation introduces a system we developed that transforms static software identifiers (gathered from SBOMs or component analysis) into dynamic, actionable intelligence. We explore key data sources and our analysis methodology, which correlates open-source software (OSS) components with real-time public internet data about the OSS project itself. With this capability, the resulting system can then present critical risk factors that traditional software threat intelligence systems often miss – project vitality and maintenance metrics, project reaction times to critical security events, EOL and existence checks, and more. Attendees will learn about the importance of including OSS software project evaluations atop existing intelligence gathering elements, to further strengthen their software supply chain security practices.

For more information, visit https://anchore.com/