Vulnerability Management at Scale

on YouTube ↗46m

" summary

Facebook's vulnerability management history and how its program evolved into a large-scale system that scans millions of devices and software packages. It covers the current system architecture and design choices that enable that scale, plus how Facebook coordinates with partner teams to deploy patches.

AI-written summary · about

" chapters (8)

1. 0:00Team introduction
2. 8:18Program evolution
3. 15:38Initial challenges and consensus
4. 27:11Architecture principles
5. 33:32Data Warehouse integration
6. 40:18Bottlenecks and lessons
7. 42:062019 solutions
8. 45:19Q&A and thanks

" related talks

• 55mFacebook's Approach To Common Web VulnerabilitiesBen Mathews · PHP UK Conference 2014
• 44mBuilding a Vulnerability Management Program: How to Eat an ElephantMegan Benoit · RSAC 2022
• 33mVulnerability Management Lifecycle in DevSecOpsAlessandro Braccio · devsecopsday 2024
• 27mEffective Vulnerability Management for a DevSecOps PipelineNikki Robinson · DevOpsDays Washington, D.C. 2024
• 33mFrom Chaos to Calm: Vulnerability Management for a Dynamic, Sprawling Technology EstateNazneen Rupawalla, Felix Hammerl · code.talks 2024
• 23mAdvanced Vulnerability Management in Cloud Foundry - Molly Crowther & Stephen Levine, PivotalStephen Levine, Molly Crowther · Cloud Foundry Summit Europe 2017
• 11mVulnerability Supply ChainsArt Manion · SupplyChainSecurityCon North America 2021
• 59mMadness of Vulnerability Management in Modern Cloud, Container, How to Win the Battle...Francesco Cipollone, Nate Sanders · CVE/FIRST VulnCon 2025