No items found.
Event

OWASP Northern Virginia - May 2024 Chapter Meetup

Date
May 16, 2024
Time
6:30 PM - 8:30 PM PT
Event Type
In person
Location
North America

Join us in Reston for the OWASP NoVA Chapter May 2024 meetup!

Location: 11955 Democracy Dr · Reston, VA

What's in your AI code?

Learn why SCA tools are wrong, and how to deal with it

With the rise of AI-fueled by Python-based libraries, it has become of paramount importance to scan Python-based projects and their dependencies for OSS vulnerabilities. Python relies on package managers like pip or conda to manage declared dependencies. Dependencies are declared in manifest files which the package manager uses to install the correct version of the required dependency. However, Python’s dependency management system coupled with its dynamic type nature makes it an especially challenging language to deal with.

In this session, Nate Michelov will talk about:

  • The basics of open source dependency management‍
  • ‍Unique problems that come with Python, including Python-based AI applications‍
  • ‍Phantom dependencies‍
  • ‍How traditional SCA tools work‍
  • ‍How program analysis provides superior SCA coverage
eMudhra Intermediate CA Compromise: The Trust Stores You Patched, and the Ones You Didn't Know You Had
Read more
Gemini 4 Argon on Cursor: solid security score, two unique solves, but slower and more expensive
Cursor with Gemini 4 Argon matches Fable 5 at 29% SecPass — tying for the top security score on Cursor — and uniquely solves two tasks no other combo on the leaderboard secures. But it is also the slowest and most expensive recent frontier combo we have tested.
Read more
Harness Your Mechs: What to build & what to buy when you bring AI into AppSec
Read more
eMudhra Intermediate CA Compromise: The Trust Stores You Patched, and the Ones You Didn't Know You Had
Read more
Gemini 4 Argon on Cursor: solid security score, two unique solves, but slower and more expensive
Cursor with Gemini 4 Argon matches Fable 5 at 29% SecPass — tying for the top security score on Cursor — and uniquely solves two tasks no other combo on the leaderboard secures. But it is also the slowest and most expensive recent frontier combo we have tested.
Read more
Harness Your Mechs: What to build & what to buy when you bring AI into AppSec
Read more

Want to stay in the loop?

Sign up for our newsletter.