0x10: Anton Sapozhnikov & Samuel Kelemen - Path to an Advanced Vulnerability Management...
Details 0x10: Anton Sapozhnikov & Samuel Kelemen - Path to an Advanced Vulnerability Management and evaluates key implications for security practitioners.
Summary
Einride Context
Anton Sapozhnikov and Samuel Kelemen describe building vulnerability management at Einride, an electric freight and charging company operating cloud services, office IT, autonomous trucks, and IoT charging stations across diverse environments.
Unified Data Plane
They aggregate roughly 60,000 findings from Orca Security (cloud/containers), Dependabot, Semgrep (code), and CrowdStrike Falcon (devices) into a central BigQuery security data lake rather than forcing developers across 22 teams to use separate panes of glass.
Metrics and Reporting
The program tracks vulnerability counts by source and type, SLA compliance, and evolution over time. Slack messages correlate categories with originating scanners so teams see consistent status across laptops, cloud, vehicles, and charging infrastructure.
Ongoing Challenges
Speakers discuss disagreements on severity, non-applicable findings with mitigating controls, and unsolved scaling problems. They share takeaways from maturing vuln management across heterogeneous operational technology and software stacks.
Related talks
CODE BLUE·40 min
Industry experts analyze emerging threats surrounding [CB22]Sisyphus and the CVE Feed: Vulnerability Management at Scale.
FIRST·24 min
Engineers explore architecture and security mechanisms for Lessons from OSV: Vulnerability Management for Open Source.
OWASP Foundation·22 min
Analysts investigate attack surfaces and defenses concerning Looking Towards the Future of Open Source Vulnerability Management SHIRI IVSTAN.