About this session
Vulnerability management has undergone several evolutions, starting with the age of detection – automated scanners (SAST, DAST, SCA), penetration testing, bug bounty programs, and more. As a result, security dashboards have become like forests of Christmas trees, overloaded with an inhuman volume of vulnerabilities. This led to the rise of prioritisation, aligning security efforts with actual business risks. Given the impossibility of fixing every potential or even confirmed vulnerability, strategic focus became essential: Fixing what matters most.
However, detection and prioritisation are still reactive measures. To stay ahead of attackers, we must go further. Assuming fixes are applied in a timely manner, the next frontier in proactive security is prediction.
In this session, Nicolas highlights the innovative concept of assessing an asset’s attractiveness rather than simply listing its vulnerabilities. Which assets are more tempting to attackers – the “shark bait”? Understanding your attack surface is key to ensuring efficient and proactive risk monitoring.
Speakers
Have a question on this talk?
Send it to the presenter. The team passes it on and the reply comes to you by email.
