Name
Using Reachability and other factors in Snyk's Risk-based Prioritization
Description

Using reachability as a risk factor to prioritize vulnerabilities makes a ton of sense. The challenge historically is that reachability calculations are very slow and prone to error because tracing every path through your code to every function, including those in 3rd party packages, is a massively complex computer science problem. Join us in this session where we will show how Snyk's DeepCode AI was built to solve precisely this kind of problem.

We will also discuss how reachability, valuable as it is, is just one of many risk factors that are useful for prioritizing remediation efforts: 

  • Is the app reachable from the external network or is it purely used by internal services? 
  • Is the app critical to your business? Processing sensitive data? 
  • Is there an exploit available in the wild that's creating buzz in social media?

In this talk we will explain how Snyk brings all that information together, allowing you to get down to the 1% of issues that must be fixed and showcase not only Snyk's reachability analysis, but also how it combines reachability with over 15 other risk factors to provide an in-depth risk score for vulnerabilities, which you can easily use to focus your remediation efforts.