Using Graph Database Technology to Resolve Transitive Vulnerabilities at Scale

Explore how graph database technology can be leveraged to resolve transitive vulnerabilities at scale in open source dependencies. Learn about the challenges of updating indirect dependencies and how Neo4j's graph database and algorithms provide an effective solution. Dive into the creation of a comprehensive graph of open source interdependencies and its application in accurately resolving vulnerabilities within complex tree structures. Gain insights into the workings of different ecosystems such as Python, Java, JavaScript, and Go. Watch a detailed Neo4j demo showcasing practical implementation. Understand the intricacies of open source security and the importance of addressing dependency confusion in modern software development.

Intro
What is open source security?
The tree of open source
Transitive vulnerabilities
Solution: Update the root
How different ecosystems work
Python
Java
JavaScript
Go
How we solve the problem
Neo4j demo
Outro