Software Integrity Blog
Top open source licenses and legal risk for developers
October 21, 2019
![[Webinars] How to risk rank vulnerabilities, insights from BSIMM10](http://www.synopsys.com/blogs/software-security/wp-content/uploads/2019/10/risk-rank-vulns-webinar.jpg){kind=icon}
Learn about five ways to approach risk ranking in vulnerability management, and hear key insights into real-life software security programs from BSIMM10.
When our research findings from CVE-2018-11776 prompted us to research other vulnerabilities, the first step was building 115 versions of Apache Struts.
How do you vet the security of third-party software from vendors, partners, and contractors? Follow software supply chain risk management best practices.
You can use the 2019 CWE Top 25 to help focus your application security efforts. Learn more about this list of the 25 most dangerous software weaknesses.
Modern application development organizations must integrate and automate DevOps security tools such as IAST into CI/CD pipelines to speed developers.
How do you ensure your application security tools are enablers rather than hurdles? By building application security processes around the tools you deploy.
In a study by (ISC)2, all executives and M&A professionals surveyed agreed that cyber security audits have become standard practice in tech due diligence.
What sets Black Duck apart from other SCA solutions? Industry-leading innovation, extensive vulnerability detection, and a broad range of integrations.
![[Webinars] Evidence-based security, design and code quality in tech M&A](http://www.synopsys.com/blogs/software-security/wp-content/uploads/2019/10/evidence-based-security-webinar.jpg)
Learn how to improve software security using evidence-based standards, and why you should inspect design and code quality during technical due diligence.
CloudBees Core users can add Synopsys AST offerings to their pipelines to boost their software security posture without slowing down application delivery.
- Agile, CI/CD & DevOps
- Application Security
- Automotive Cyber Security
- Cloud Security
- Container Security
- Data Breach Security
- Developer Enablement
- Featured
- Financial Cyber Security
- Fuzz Testing
- Healthcare Security & Privacy
- Interactive Application Security Testing (IAST)
- IoT Security
- Medical Device Security
- Mergers & Acquisitions
- Mobile App Security
- News & Announcements
- Open Source Security
- Security Training & Awareness
- Software Architecture & Design
- Software Compliance, Quality & Standards
- Software Composition Analysis (SCA)
- Software Security Program
- Software Security Research
- Static Analysis (SAST)
- Web Application Security
- Webinars