OROCHIFY - An Assist to Product Developers in Manufacturing Industry to Find Vulnerabilities
summary
OROCHIFY is a Docker-based orchestration framework that runs third‑party scanners and proprietary scripts to give product teams fast pre-test checks during implementation, not full expert analysis. It uses Docker images per scanner, a queued runner to avoid overloading IoT devices, and both web GUI and CLI front ends. Results are auto‑judged against an internal risk mapping (auto-judgment to company risk language), producing consistent logs for quick retest, QA integration, and JC‑STAR level‑1 self‑conformance support after six years of iterative development.
AI-written summary · about
chapters (16)
- 0:00OROCHIFY introduction
- 1:06Speaker backgrounds
- 2:31Vulnerability assessment
- 3:56Shift left testing
- 5:20Business unit assessment
- 7:32OROCHIFY evolution
- 10:31OROCHIFY for non-experts
- 12:37OROCHIFY design
- 14:46OROCHIFY features
- 16:54OROCHIFY interfaces
- 18:21OROCHIFY web demo
- 22:47OROCHIFY use cases
- 26:00J-STAR labeling
- 28:09J-STAR with OROCHIFY
- 29:15Summary and future
- 30:41Q&A
related talks
19mOXO: Orchestrating Security Scans Like a Pro
30mORT Server: An open source platform to automate CRA checks
27mSecuring the Software Supply Chain: Integrating OpenSSF Scorecard, Jenkins, and the O...
35mOSCAR - Automate software analysis, compliance and security
32mSecOps Automation And Orchestration
44mSecurity Research with Open Source Software: Vol. Omega
32mA Security State Of Mind: Compliance and ...
28mDevSecOps - Security from Scratch