“Red Teaming the Software Supply Chain”

SourceCodeRED will be delivering a 8-hour workshop at the OWASP AppSec Days Singapore on October 1st, 2024.  Cost is $650 USD per person.   You can read about the lineup at:  https://owaspappsecdayssingapore202.sched.com/event/1g5yi/1-day-training-red-teaming-the-software-supply-chain

You can buy a ticket at: https://owaspappsecdayssingapore2.rsvpify.com/

DESCRIPTION:

The software supply chain faces escalating threats, with attacks increasing by more than 730% annually since 2019. These attacks are innovative and continually evolving. One method for organizations to counter this growing threat is by empowering their red teams to test their software supply chains. This training aims to equip security teams with the knowledge to broaden their operations to include software chain security through reconnaissance, tooling, and interactive attack scenarios.

“Red Teaming the Software Supply Chain”

SourceCodeRED will be delivering a 8-hour workshop at Melbourne BSides, November 15th, 2024.  Cost is $100 AU per person.   

You can buy a ticket at: https://www.bsidesmelbourne.com/2024-training-course-ssc.html

DESCRIPTION:

The software supply chain faces escalating threats, with attacks increasing by more than 730% annually since 2019. These attacks are innovative and continually evolving. One method for organizations to counter this growing threat is by empowering their red teams to test their software supply chains. This training aims to equip security teams with the knowledge to broaden their operations to include software chain security through reconnaissance, tooling, and interactive attack scenarios.

“Red Teaming the Software Supply Chain”

SourceCodeRED will be delivering a 4-hour workshop at BSides Las Vegas during Hacker Summer Camp 2024.  The workshop will start at 3pm and ends at 7pm:  https://bsideslv.org/speakers#G39HJA

The schedule can be found at https://bsideslv.org/schedule

DESCRIPTION:

The software supply chain faces escalating threats, with attacks increasing by more than 730% annually since 2019. These attacks are innovative and continually evolving. One method for organizations to counter this growing threat is by empowering their red teams to test their software supply chains. This training aims to equip security teams with the knowledge to broaden their operations to include software chain security through reconnaissance, tooling, and interactive attack scenarios.

“Red Teaming the Software Supply Chain”

SourceCodeRED will be delivering an 8 hour session at Lot 14 in Adelaide.  Tickets are $120 and can be purchased here:
https://bsidesadelaide.com.au/agenda-training

DESCRIPTION:

The software supply chain faces escalating threats, with attacks increasing by more than 730% annually since 2019. These attacks are innovative and continually evolving. One method for organizations to counter this growing threat is by empowering their red teams to test their software supply chains. This training aims to equip security teams with the knowledge to broaden their operations to include software chain security through reconnaissance, tooling, and interactive attack scenarios.

“Red Teaming the Software Supply Chain”

SourceCodeRED delivered an 4-hour workshop at CrikeyCon 2024 entitled “Red Teaming the Software Supply Chain”

You can find the training website here:
https://crikeycon.com/workshops/#redteam

DESCRIPTION:

The purpose of this workshop is to learn about the security posture of a specific software supply chain (SSC) by testing it via focused red-teaming activities. A big part of this workshop is learning how software is created by identifying how a target writes, builds and deploys its applications.
We will go through the different stages of the SSC and talk about the different security controls that exist at each stage. From that insight will come an understanding of the weaknesses and attack vectors available against that target. We will also spend some time talking about recent attacks and how malicious actors are evolving their techniques.
Participants will come away from this workshop with an understanding of how broad the software supply chain is, what security controls exist, and how to test if those controls are present.

“Attacking and Defending the Software Supply Chain”

SourceCodeRED delivered an 8 hour training session at Melbourne BSides entitled “Attacking and Defending the Software Supply Chain”

You can find the training website here:
https://www.bsidesmelbourne.com/2023-training-course-ssc.html

DESCRIPTION:

The software supply chain is an often mis-understood thing, so this training will first help us understand how broad the software supply chain (SSC) is and what it comprises.  Once you understand what the SSC is, and what the different stages are in a given SSC, you can start to identify what security controls can be used to protect each stage.

​From that insight will come an understanding of the weaknesses and attack vectors available to you if you intend to test the security of a SSC.  This is important as attacks on the SSC are increasing at more than 630% year on year, which is crazy!  Even worse, the types of attacks, and the ingenuity of the attackers is really impressive, and downright scary.

“Attacking and Defending the Software Supply Chain”

SourceCodeRED delivered an 8 hour training session at AISA CyberCon Canberra entitled “Attacking and Defending the Software Supply Chain”

You can find the training website here:

DESCRIPTION:

The software supply chain is an often mis-understood thing, so this training will first help us understand how broad the software supply chain (SSC) is and what it comprises.  Once you understand what the SSC is, and what the different stages are in a given SSC, you can start to identify what security controls can be used to protect each stage.

​From that insight will come an understanding of the weaknesses and attack vectors available to you if you intend to test the security of a SSC.  This is important as attacks on the SSC are increasing at more than 630% year on year, which is crazy!  Even worse, the types of attacks, and the ingenuity of the attackers is really impressive, and downright scary.