How Cybertrust Japan is Tackling OSS Security to Improve Our Digital Universe
Explore Cybertrust Japan's initiatives to enhance open-source software security, their impact on products and services, and their vision for a safer digital universe.
Delivering Security Fixes Continuously Into Your Embedded Linux
Learn strategies for continuous security updates in embedded Linux systems, focusing on update models, test automation, and minimizing out-of-tree code. Explore real-world examples using EMLinux and open-source contributions.
Log4Shell Live Hack - A Hands-on, Actionable Fix Guide
Hands-on guide to understanding and mitigating the Log4Shell vulnerability, featuring live hacks, real-world remediation approaches, and practical demos for Java-based applications and infrastructure.
Understanding the Role of Software Bill of Materials in Cybersecurity Readiness
Explore the importance of Software Bill of Materials (SBOMs) in cybersecurity, including adoption challenges, implementation benefits, and strategies for improving production and consumption rates.
Open Source Software Security Mobilization Plan - Press Briefing
Executives announce Open Source Software Security Mobilization Plan, outlining ten investment streams to enhance open source software resilience and security following a summit with industry and government leaders.
The DARPA OPS-5G Program - Collaboration Between Government and Open Source Community
Explore DARPA's OPS-5G program, its collaboration with Linux Foundation, and the development of secure 5G networks through open-source initiatives and the 5G Super Blueprint.
Securing the Software Supply Chain: From Threats to Best Practices
Comprehensive overview of software supply chain security, covering history, threats, initiatives, challenges, and best practices. Experts discuss key issues and solutions for organizations.
Supply Chain Security: From Infrastructure to Application, Code to Cloud
Explore best practices for securing the entire software supply chain, from infrastructure to application, covering code, cloud, dependencies, and deployment.
Global Software Vulnerability Standard Birds of a Feather Discussion
Explore the Global Software Vulnerability Standard (GSVS) in this Linux Foundation discussion, addressing key aspects of software security and vulnerability management.
Mobilizing the Open Source Industry for Better Security by Default
Explore strategies to enhance open source security through industry collaboration, focusing on default protections and collective action for safer software ecosystems.
Improving Global Software Supply Chain Security with Alpha-Omega Project
Explore strategies to enhance global software supply chain security through the Alpha-Omega Project, focusing on critical and long-tail open source projects.
Fireside Chat on Open Source Security and Industry Trends
Explore open source security challenges and solutions with industry leaders, discussing government interest, education, and future trends in cybersecurity.
Automated Techniques for Measuring Trustworthiness of Open Source Code and Communities
Explore cutting-edge tools and methods for analyzing software security, determining project trustworthiness, and measuring against best practices in open source development.
What You Need to Know and Do About Vulnerability Disclosure
Learn about coordinated vulnerability disclosure in open source projects, its importance for security, and implications for maintainers and users.
A Vulnerability Database Should Not Be About Vulnerabilities
Explore innovative approaches to vulnerability databases, focusing on package-centric models, data aggregation, and addressing common issues in cybersecurity information management.
Managing Audits for Critical Open Source Projects
Learn strategies for managing audits of critical open source projects, focusing on security, quality assurance, and best practices for maintaining project integrity.
Hardware Protections Against ROP Attacks
Explore hardware-based defenses against Return-Oriented Programming (ROP) attacks with IBM expert Mike Rapoport, focusing on cutting-edge security measures for system protection.
Hacking for Developers
Learn ethical hacking techniques, tools, and methodologies to enhance your development skills and improve software security. Gain insights into vulnerability assessment and exploitation.
Authenticating Supply-chain Metadata - Building Remote Code Attestations on GitHub
Explore techniques for authenticating supply-chain metadata and building remote code attestations on GitHub, enhancing software security and integrity in the development process.
SBOMs for Embedded Systems - What's Working, What's Not
Explore challenges and successes in implementing Software Bill of Materials (SBOMs) for embedded systems, discussing regulatory impacts, generation methods, and practical applications.
Designing Secure Containerized Applications for Embedded Linux Devices
Learn to design secure containerized applications for embedded Linux, covering container infrastructure, image security, execution security, and best practices.