Scalable Management of Vulnerabilities in Open Source
Learn strategies for efficiently managing vulnerabilities in open source projects from experts at Google and GitHub, focusing on scalable approaches and best practices.
Rising Threat - Securing Your Open-Source Pipeline
Explore strategies to secure open-source pipelines, addressing vulnerabilities, dependencies, and best practices for robust cybersecurity in software development.
VEX Overview - Cybersecurity and Infrastructure Security Agency
Explore VEX with cybersecurity expert Allan Friedman, gaining insights into this crucial aspect of infrastructure security and its implications for modern digital systems.
Malicious Package Trends Compared with Malware Evolution
Explore malicious package trends and their parallels with malware evolution, gaining insights into cybersecurity challenges and strategies for protecting software supply chains.
All About That BOM - Understanding Software Bill of Materials
Explore software supply chain security with a focus on Software Bill of Materials (SBOM), its importance, and implementation strategies for enhanced transparency and risk management.
Protect Your Application, Not the Network - Adding Zero Trust Superpowers to Critical Applications and Systems
Discover how to implement Zero Trust security principles to safeguard critical applications and systems, enhancing protection beyond traditional network-based approaches.
Security as Code: A DevSecOps Approach
Explore DevSecOps and Security as Code principles, focusing on SQL injection prevention and vulnerability analysis using Code2LV and data flow techniques.
Supply Chain Security, SBOMs and OSPOs: An Ecosystem and Compliance Update
Explore cybersecurity, regulatory compliance, and software supply chain integrity. Learn about SBOMs, the Open Source Security Foundation, and the role of OSPOs in enhancing security.
Using OpenSSF's Allstar to Secure Your Organization's GitHub Repositories
Learn to enhance GitHub repository security with OpenSSF's Allstar tool, exploring its features and implementation for robust organizational protection.
Lessons Learned from Automating SLSA-Compliance Evaluation
Explore automating SLSA-compliance evaluation, covering provenance, pipeline dynamics, and challenges in implementing various SLSA levels. Gain insights on evidence-based trust and unfalsifiable provenance.
Google SLSA and NIST SSDF - Emerging Software Supply Chain Security Best Practices
Explore emerging best practices for software supply chain security, focusing on Google's SLSA framework and NIST's SSDF guidelines to enhance your organization's cybersecurity posture.
Summing Up the OpenSSF Summit - May 2022 Gathering and Action Plan
Experts discuss OpenSSF's May 2022 summit, addressing open source security challenges, government involvement, and future initiatives for enhancing software supply chain resilience.
What Role Do Package Registries Have in Securing the Supply Chain?
Explore the critical role of package registries in supply chain security, focusing on their impact, challenges, and best practices for enhancing software integrity and reliability.
Securing Your Open Source Supply Chain
Explore strategies for securing the open source supply chain, focusing on best practices and tools to mitigate risks in software development and deployment.
Open Source Cybersecurity - Addressing Challenges in Software Security
Explore open source cybersecurity challenges and solutions with industry experts, discussing survey findings, enterprise impacts, and automation strategies for improved software security.
Addressing Cybersecurity Challenges in Open Source Software - June 29, 2022
Explore cybersecurity challenges in open source software, focusing on organizational priorities, improvement strategies, and policy drivers. Gain insights from Snyk and Linux Foundation research.
Addressing Cybersecurity Challenges in Open Source Software
Insights on addressing cybersecurity challenges in open source software, including organizational priorities, improvement strategies, and policy drivers. Live panel discussion of key findings from Snyk and Linux Foundation research.
Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE
Explore non-falsifiable provenance in Tekton using SPIFFE/SPIRE, enhancing software supply chain security and achieving SLSA3 compliance.
The Simple, Yet Lethal Anatomy of a Software Supply Chain Attack
Explore the anatomy of software supply chain attacks, their potential lethality, and strategies for prevention in this insightful session on cybersecurity vulnerabilities.
GitBOM - Repurposing Git's Graph for Supply Chain Security and Transparency
Explore innovative use of Git's graph structure for enhancing software supply chain security and transparency, offering insights into modern cybersecurity practices.
Maslow's Hierarchy of Supply Chain Needs
Explore Maslow's hierarchy applied to supply chain security, offering insights on prioritizing needs and enhancing overall resilience in the digital ecosystem.