OmniBOR: Bringing the Receipts for Supply Chain Security
Explore OmniBOR, a new approach to capture full artifact dependency graphs in software development, enhancing supply chain security and addressing SBOM scanner limitations.
Realities of SBOM - What Is Under the Hood of Software Bill of Materials
Explore the complexities of Software Bill of Materials (SBOM) beyond dependency files, including interdependencies, integrity, and vulnerability monitoring across the software development lifecycle.
Software Supply Chain Security Case Study at Anaconda
Explore real-world experiences in securing a large-scale open-source packaging pipeline, addressing challenges, implementing solutions, and achieving positive outcomes using respected security designs.
Mentorship Session - Tools and Techniques to Debug an Embedded Linux System
Explore essential tools and techniques for debugging embedded Linux systems, covering user space and kernel space, to improve quality and efficiently find/fix bugs.
Secure Bootloaders and Secure Software Update Support in CIP - Civil Infrastructure Platform
Explore secure bootloaders and software updates in CIP, focusing on implementation, IEC-62443 compliance, and the collaborative efforts of CIP workgroups to enhance industrial software security.
How Cybertrust Japan is Tackling OSS Security to Improve Our Digital Universe
Explore Cybertrust Japan's initiatives to enhance open-source software security, their impact on products and services, and their vision for a safer digital universe.
How Grafana Labs Builds and Sustains Communities
Explore Grafana Labs' strategies for building thriving open-source communities, drawing from decades of experience in fostering collaboration and sustainable growth in large-scale projects.
Delivering Security Fixes Continuously Into Your Embedded Linux
Learn strategies for continuous security updates in embedded Linux systems, focusing on update models, test automation, and minimizing out-of-tree code. Explore real-world examples using EMLinux and open-source contributions.
Log4Shell Live Hack - A Hands-on, Actionable Fix Guide
Hands-on guide to understanding and mitigating the Log4Shell vulnerability, featuring live hacks, real-world remediation approaches, and practical demos for Java-based applications and infrastructure.
Demystifying Device Tree Concepts
Explore essential Device Tree concepts for embedded systems, covering structure, syntax, and practical applications in hardware description and configuration.
The Coming Decade of Autonomous Networks - Strategies and Collaboration
Explore China Mobile's strategy for Level 4 Autonomous Networks, the role of open-source communities, AI advancements, and new collaboration paradigms in shaping the future of networking.
Securing the Software Supply Chain: From Threats to Best Practices
Comprehensive overview of software supply chain security, covering history, threats, initiatives, challenges, and best practices. Experts discuss key issues and solutions for organizations.
Supply Chain Security: From Infrastructure to Application, Code to Cloud
Explore best practices for securing the entire software supply chain, from infrastructure to application, covering code, cloud, dependencies, and deployment.
A Vulnerability Database Should Not Be About Vulnerabilities
Explore innovative approaches to vulnerability databases, focusing on package-centric models, data aggregation, and addressing common issues in cybersecurity information management.
Hardware Protections Against ROP Attacks
Explore hardware-based defenses against Return-Oriented Programming (ROP) attacks with IBM expert Mike Rapoport, focusing on cutting-edge security measures for system protection.
Finding the Path from Embedded to Edge Using Product Lines
Explore the evolution from embedded to edge computing, focusing on product lines, maintenance, open source, and container frameworks for efficient development and deployment.
SBOMs for Embedded Systems - What's Working, What's Not
Explore challenges and successes in implementing Software Bill of Materials (SBOMs) for embedded systems, discussing regulatory impacts, generation methods, and practical applications.
If Oops Do Not Panic - Handling Kernel Errors
Explore kernel panic handling techniques and strategies for maintaining system stability in critical situations.
Designing Secure Containerized Applications for Embedded Linux Devices
Learn to design secure containerized applications for embedded Linux, covering container infrastructure, image security, execution security, and best practices.
From UART to PCIe and DMA - Selecting Connectivity for FPGA-based Subsystems
Explore FPGA connectivity options from UART to PCIe and DMA, covering physical layers, hardware abstraction, and advanced techniques for efficient subsystem design and implementation.
Asymmetric/Heterogeneous MultiProcessing - Mainline Linux and Zephyr in Unison
Explore AMP/HMP systems using Linux and Zephyr, focusing on integration, communication, and resource management for efficient heterogeneous computing architectures.