A Developer's Guide to SAML
Learn SAML protocol essentials, implementation in modern applications, and troubleshooting tips. Gain insights into this widely-used identity security standard and its nuances across different applications.
Learning the Okta CLI - Introduction and Usage Guide
Discover how to efficiently manage Okta identity and access management using the command-line interface, enhancing your development workflow and productivity.
CIP: Reusing and Strengthening Open Source Component Security for Industrial Grade Systems
Exploring CIP's efforts to enhance open-source component security for industrial software, focusing on meeting IEC-62443 standards and collaborating with Debian and other communities to strengthen cybersecurity.
Implementing UEFI-based Secure Boot and OTA Updates for Embedded ARM Devices
Explore secure boot implementation and OTA updates for embedded ARM devices using UEFI, covering challenges, solutions, and practical integration techniques for robust system security.
State of Intel SGX in Linux
Comprehensive overview of Intel SGX support in Linux, covering kernel interface, features, and confidential computing run-times. Explores the maturing SGX ecosystem and its status as a mainline kernel technology.
Introducing IO Devices into Trusted Execution Environments
Explore security and software changes for IO support in trusted execution environments, focusing on confidential computing and hardware-based TEEs like Intel SGX and TDX.
Baking a Cake with Supply Chain Tooling - Securing Software from Scratch
Explore software supply chain security from an engineer's perspective, discussing tools, standards, and solutions for securing software from scratch.
Revisiting Total Cost of Ownership for External Dependencies
Explore unaccounted risks of external dependencies in software development with Paul Vixie. Learn strategies to mitigate vulnerabilities and improve security practices in IoT and beyond.
Managing Audits for Critical Open Source Projects
Learn how OSTIF manages security audits for critical open source projects, connecting experts with maintainers to improve overall security posture and patch vulnerabilities.
Secure and Dynamic Hardware Partitioning Management on Heterogeneous SoC
Explore dynamic hardware partitioning for heterogeneous SoCs, addressing security and performance challenges in complex IoT/edge systems with multiple OSs and TEEs.
Improving Unmodified Classic Application Confinement
Explore techniques for enhancing application security through sandboxing, focusing on unmodified classic apps. Learn about policy updates, tagging, and dynamic policy composition.
Privacy-preserving Approaches to Transparency Logs
Explore append-only transparency logs, their applications in infrastructure, and privacy-preserving techniques to balance immutability with user rights and data protection.
Understanding the Impact of Critical Vulnerabilities in Critical Infrastructure: A Detective Story
Explore strategies for assessing and mitigating critical infrastructure vulnerabilities, focusing on novel threats and their potential ecosystem-wide impacts across various sectors.
Attesting Practically: Exploring the Glue Behind Secure Runtime Environments
Explore practical applications of attestations in software supply chain security, focusing on Cosign, in-toto, and VEX to create secure, auditable runtime environments and effectively manage security threats.
The Need to Drive Towards Frequent and Sustained Software Updates in Automotive Software
Explore strategies for long-term software maintenance in automotive systems, focusing on security, consumer expectations, and the challenges of sustaining updates over extended periods.
Introducing GitBOM: Tracking Software Dependencies and Improving Supply Chain Security
Explore GitBOM, an open-source scheme for tracking dependencies in software, enhancing security and transparency across languages and ecosystems. Learn implementation and benefits for your software supply chain.
VEXing Open Source Security - Vulnerability Data for Everything
Explore the Vulnerability Exchange Format (VEX) standard for improving vulnerability management in open source projects and enterprise software security.
Gitsign - Keyless Git Commit Signing
Explore Gitsign, a Sigstore project enabling keyless Git commit signing. Learn its functionality, integration with Sigstore, and application in development, CI/CD, and GitOps workflows.
Securing Your Supply Chain by Building with FRSCA
Explore FRSCA, an OpenSSF project implementing CNCF's Secure Software Factory Reference Architecture to protect against supply chain attacks and enhance build pipeline security.
Improving Bootup Performance of Containers with Overlay Images in TEE Environments
Optimizing container bootup in TEE environments: Accelerating image downloads, reducing key negotiation overhead, and offloading image decryption for improved performance and security.
PIVOT: An Open Community Platform for Sharing Vehicle Telematics Data for Research and Innovation
Explore PIVOT: A community platform for sharing vehicle telematics data, supporting research in cybersecurity, intelligent transportation, and smart communities through datasets and open-source tools.