Unlocking Go's Security Potential: Harnessing the Power of govulncheck and GoSec

By David Aparicio

Elevator Pitch

Introducing govulncheck and GoSec, your Go programming security allies. Govulncheck scans for vulnerable packages, while GoSec provides static analysis and actionable recommendations. Elevate your security with govulncheck and GoSec. Stay secure, stay confident.

Description

THINK OF A PREVENTIVE APPROACH FROM THE DESIGN PHASE OF A PROJECT

In 2020, in the midst of the Covid-19 crisis, the number of cyberattacks exploded worldwide. That same year, the National Agency for Information Systems Security (ANSSI) report showed that ANSSI’s operations increased fourfold, compared to the previous year. In 2022, ANSSI counted more than 2000 reports, 1057 incidents including 8 major ones.

The pandemic has increased the opportunities for destabilization (cyber attacks) in several sectors, including the health sector: Rouen University Hospital, Narbonne, Montpellier, Dax, Villefranche-sur-Saône, Oloron-Sainte-Marie, Saint-Gaudens… The list of hospitals is getting longer.

Moreover, since the RGPD came into force, the protection of personal data as well as security “by design” have become central topics in our projects.

I will present the techniques used in a Go project and I will also talk about management’s awareness of these important aspects.

Indeed, even being in the internal network of a datacenter, we are not safe from an intrusion. There is no such thing as zero risk.

~ Security By Design 101

Notes

I wrote an article in August 2022 in the Special Issue 8 of Programmez! - “100% SECURITY / HACKING / OWASP / DEVSECOPS, ETC.”

I made a workshop of 3 hours on this subject for the big French conference DevoxxFR2023

More information and the talk/conference portfolio on my website