Vulntology - A Methodology to Characterize Vulnerabilities with Granular and Intuitive Structure
Explore a methodology for characterizing vulnerabilities with granular, intuitive structure. Learn about vulnerability objects, scenarios, barriers, actions, and impacts in cybersecurity.
Hidden Vulnerabilities in Open Source
Explore hidden vulnerabilities in open source software with experts from Palo Alto Networks, uncovering potential risks and learning strategies for enhanced security.
Hijacking.gov.uk - Identifying and Communicating Risks to the Digital State
Explore digital security risks in government domains and learn effective strategies for identifying and communicating vulnerabilities to protect critical online infrastructure.
A Different Kind of S3 - First Line Security of the Supply Chain
Explore innovative approaches to supply chain security, focusing on first-line defense strategies and cutting-edge solutions for robust protection against emerging threats.
Building Super-Contributors in Alluxio Open Source Community
Discover strategies for cultivating exceptional contributors in open-source projects, focusing on Alluxio's community-building approach and best practices.
Keeping Your Open Source Community Accessible to All
Strategies for fostering inclusivity and accessibility in open source communities, promoting diverse participation and collaboration.
Bootstrapping a Community Through Mentorship
Explore effective strategies for building and nurturing tech communities through mentorship programs, fostering growth and collaboration among developers.
Turning Users Into Advocates at Scale
Learn strategies to transform users into passionate advocates, focusing on community building, minimizing barriers, and fostering contributions through empathy-driven, scalable approaches.
Preparing for Zero-Day: Vulnerability Disclosure in Open Source Software
Learn strategies for handling vulnerability disclosures in open source projects, including best practices for communication and mitigation, to enhance software security and protect against potential attacks.
From Log4shell to OpenSSL - Reflections on a Year of Open Source Software Security
Explore the impact of Log4shell on open source software security, progress made, and future challenges. Gain insights into enhancing OSS security and its role in critical infrastructure.
Securing Open Source Through Threat Modeling
Learn to identify attack surfaces and secure open source projects through threat modeling. Discover techniques to find vulnerabilities, analyze risks, and enhance software security.
How Digital Public Goods Are Bringing the $10 Trillion Informal Economy Into the Digital Payments Loop
Explore how digital public goods like Mojaloop are revolutionizing financial inclusion, enabling interoperable payment systems and bringing the unbanked into the digital economy post-COVID-19.
Building Better Communities: Actions for Diversity and Inclusion
Explore strategies for creating diverse, inclusive tech communities through actionable steps, values alignment, and behavioral reflection to foster safe, equitable environments for all participants.
Curating and Securing Open Source for GovCloud
Explore automated workflows for curating and securing open-source libraries in air-gapped environments, enhancing developer experience while maintaining strong controls over third-party packages.
Hidden Differences: How to Be Inclusive in the Workplace
Strategies for creating an inclusive workplace for neurodivergent individuals, addressing hidden differences and fostering a supportive environment for all team members.
Best Practices for Downstream Use of Project Trademarks
Explore best practices for downstream use of open source project trademarks, including legal compliance and community guidelines, to protect project integrity and maintain trademark rights.
Squashing Diversity, Equity, and Inclusion Bugs in Open Source Projects
Learn strategies to identify and resolve "DEI bugs" in open source projects, fostering inclusivity and maximizing collaboration potential for underrepresented groups in tech communities.
Build a Community, Not a Framework - Panel Discussion
Explore community-building strategies in open-source projects with insights from industry experts on fostering collaboration, engagement, and sustainable growth beyond framework development.
Ketchup, Mustard, and Relish of Software Supply Chain Security - Panel Discussion
Explore open source standards and tools for enhancing software supply chain security with industry experts. Learn about S2C2F, SLSA, and FRSCA, their benefits, and how to implement them effectively.
Security Advisory Programs: Creating Transparency in Software Supply Chain
Strategies for implementing transparent security communications programs in software products, addressing customer demands for vulnerability disclosure and open source patching accountability.
SLSA in Action: Securing the Software Supply Chain
Live demonstration of securing software supply chain and achieving SLSA compliance using sample repo. OpenSSF SLSA group showcases tooling developed to meet SLSA 1.0 Build Specification, offering practical insights into implementation.