
Explore security and software changes for IO support in trusted execution environments, focusing on confidential computing and hardware-based TEEs like Intel SGX and TDX.

Explore software supply chain security from an engineer's perspective, discussing tools, standards, and solutions for securing software from scratch.

Explore unaccounted risks of external dependencies in software development with Paul Vixie. Learn strategies to mitigate vulnerabilities and improve security practices in IoT and beyond.

Learn how OSTIF manages security audits for critical open source projects, connecting experts with maintainers to improve overall security posture and patch vulnerabilities.

Explore dynamic hardware partitioning for heterogeneous SoCs, addressing security and performance challenges in complex IoT/edge systems with multiple OSs and TEEs.

Explore techniques for enhancing application security through sandboxing, focusing on unmodified classic apps. Learn about policy updates, tagging, and dynamic policy composition.

Explore append-only transparency logs, their applications in infrastructure, and privacy-preserving techniques to balance immutability with user rights and data protection.

Explore strategies for assessing and mitigating critical infrastructure vulnerabilities, focusing on novel threats and their potential ecosystem-wide impacts across various sectors.

Explore practical applications of attestations in software supply chain security, focusing on Cosign, in-toto, and VEX to create secure, auditable runtime environments and effectively manage security threats.

Explore strategies for long-term software maintenance in automotive systems, focusing on security, consumer expectations, and the challenges of sustaining updates over extended periods.

Explore GitBOM, an open-source scheme for tracking dependencies in software, enhancing security and transparency across languages and ecosystems. Learn implementation and benefits for your software supply chain.

Explore the Vulnerability Exchange Format (VEX) standard for improving vulnerability management in open source projects and enterprise software security.

Explore Gitsign, a Sigstore project enabling keyless Git commit signing. Learn its functionality, integration with Sigstore, and application in development, CI/CD, and GitOps workflows.

Explore FRSCA, an OpenSSF project implementing CNCF's Secure Software Factory Reference Architecture to protect against supply chain attacks and enhance build pipeline security.

Optimizing container bootup in TEE environments: Accelerating image downloads, reducing key negotiation overhead, and offloading image decryption for improved performance and security.

Explore PIVOT: A community platform for sharing vehicle telematics data, supporting research in cybersecurity, intelligent transportation, and smart communities through datasets and open-source tools.

Explore high-level API security using Keycloak, focusing on OAuth 2.0, FAPI, and advanced features for robust authorization in digital transformation contexts.

Explore a modular approach to creating accurate Software Bills of Materials (SBOMs) using Micro-SBOMs, enhancing software security and compliance tracking beyond traditional post-build methods.

Explore package repository security challenges, modern practices, and collaborative solutions for improving community repositories like PyPI and NPM.

Secure boot and disk encryption implementation on Tegra platforms: lessons learned, challenges faced, and solutions developed for a robust and future-proof system using vendor tools and custom OS builds.

Explore software identity challenges in supply chain security, examining existing naming standards, potential risks, and collaborative solutions for effective vulnerability management.