
Explore Code Genome, a novel approach to generate and verify Software Bills of Materials (SBOMs) using semantically meaningful fingerprints of code functionality, enhancing software supply chain security.

Explore open source standards and tools for enhancing software supply chain security with industry experts. Learn about S2C2F, SLSA, and FRSCA, their benefits, and how to implement them effectively.

Explore how media influences open source software security through artistic visualization, combining cybersecurity trends with creative techniques to enhance awareness of vulnerabilities.

Explore OmniBOR, a new approach to capture full artifact dependency graphs in software development, enhancing supply chain security and addressing SBOM scanner limitations.

Explore the complexities of Software Bill of Materials (SBOM) beyond dependency files, including interdependencies, integrity, and vulnerability monitoring across the software development lifecycle.

Strategies for implementing transparent security communications programs in software products, addressing customer demands for vulnerability disclosure and open source patching accountability.

Explore npm's integration with Sigstore to enhance package provenance, addressing security challenges and implications for the broader open-source ecosystem.

Learn to secure software supply chains using in-toto and TUF frameworks. Explore their integration, real-world applications, and new open-source tools for enhanced protection against cyber threats.

Explore how the Scorecard GitHub Action ensures security in open-source projects, using Sigstore for result integrity and remote attestation in crowd-sourced data validation.

Live demonstration of securing software supply chain and achieving SLSA compliance using sample repo. OpenSSF SLSA group showcases tooling developed to meet SLSA 1.0 Build Specification, offering practical insights into implementation.

Explore real-world experiences in securing a large-scale open-source packaging pipeline, addressing challenges, implementing solutions, and achieving positive outcomes using respected security designs.

Learn to enhance open-source project security using OpenSSF Best Practices Badges and Scorecards. Gain practical tips for implementation and addressing common issues to improve your project's security posture.

Explore GUAC: a tool for comprehensive software supply chain analysis, integrating metadata to identify vulnerabilities, assess trust, and enhance security through GraphQL-powered insights.

Explore secure bootloaders and software updates in CIP, focusing on implementation, IEC-62443 compliance, and the collaborative efforts of CIP workgroups to enhance industrial software security.

Explore Cybertrust Japan's initiatives to enhance open-source software security, their impact on products and services, and their vision for a safer digital universe.

Learn strategies for continuous security updates in embedded Linux systems, focusing on update models, test automation, and minimizing out-of-tree code. Explore real-world examples using EMLinux and open-source contributions.

Hands-on guide to understanding and mitigating the Log4Shell vulnerability, featuring live hacks, real-world remediation approaches, and practical demos for Java-based applications and infrastructure.

Explore the importance of Software Bill of Materials (SBOMs) in cybersecurity, including adoption challenges, implementation benefits, and strategies for improving production and consumption rates.

Executives announce Open Source Software Security Mobilization Plan, outlining ten investment streams to enhance open source software resilience and security following a summit with industry and government leaders.

Comprehensive overview of software supply chain security, covering history, threats, initiatives, challenges, and best practices. Experts discuss key issues and solutions for organizations.

Explore best practices for securing the entire software supply chain, from infrastructure to application, covering code, cloud, dependencies, and deployment.