Introducing OpenChain Japan Community's SBOM Initiatives
Explore Japan's SBOM initiatives, SPDX 3.0 contributions, and future outlook. Gain insights on software supply chain security, practical SBOM adoption, and global implications for stakeholders.
An Open-Source Implementation for Linked-Data-Based Verifiable Credentials with Selective Disclosure and Zero-Knowledge Proofs
Explore an open-source implementation of Linked-Data-based verifiable credentials, enabling secure digital identity management with selective disclosure and zero-knowledge proofs.
Revolutionizing Automotive Software: DevSecOps, Functional Safety, and Open Source Synergy
Explore DevSecOps integration in automotive software development, focusing on functional safety and open-source synergy to enhance innovation and reliability in vehicle systems.
The Road to Zero CVEs: People and Technology
Explore open source software vulnerabilities, supply chain security legislation, and emerging tools like Sigstore to fortify digital ecosystems and manage CVEs effectively.
Eliminating the Unknowns: Using GUAC to Better Understand Your Software Supply Chain
Learn how GUAC, an open-source knowledge graph, aggregates software supply chain metadata to enhance security, inform decision-making, and enable policy-driven admission control in your development lifecycle.
The Evolution of SBOMs in AlmaLinux
Explore AlmaLinux's SBOM generation process, its evolution to meet NTIA requirements, and the implications for RPM-based Linux distributions. Learn about challenges and solutions in software supply chain security.
Software Supply Chain Security with Trusted Execution Environment Provisioning Protocol
Explore TEEP protocol for secure software supply chain management, covering its benefits, implementation, and application across various hardware platforms and industries.
From an OSS-Fuzz Report to LKML Patch Submission - A Hands-on Journey
Hands-on guide to fixing vulnerabilities using OSS-Fuzz reports, from debugging to submitting patches to the Linux Kernel Mailing List. Learn to contribute to open source projects and improve software quality.
Beyond Guidelines - Designing and Implementing Robust Build Pipelines
Learn to design and implement secure build pipelines beyond standard guidelines. Explore practical tools and methods to enhance supply chain security and protect against rising attacks.
The 'S' in IoT Stands for Security - Securing Connected Devices
Explore IoT security challenges, recent breaches, and how containerization can enhance device protection. Learn best practices for building secure IoT devices and managing their lifecycle.
Securing TPM Secrets with TXT and Kernel Signatures
Explore securing TPM2 NVRAM data using Intel TXT and tboot extensions for kernel signature verification, enhancing protection while maintaining usability during kernel updates.
Writing Viruses for Fun, Not Profit
Explore virus creation techniques, including self-replication and obfuscation, to understand how they evade detection and infect systems. Learn to anticipate vulnerabilities and strengthen application security.
Curtail Coercive Control Using Open Source Applications and Services
Explore strategies to combat technology-enabled coercive control using open-source solutions. Learn design principles, privacy considerations, and challenges in addressing digital abuse.
Why Is There No Free Software Vulnerability Database?
Explore the need for a free software vulnerability database, its challenges, and potential solutions. Learn about Package URL, data models, and future plans for improved cybersecurity.
Everything-as-Code: Pushing the Boundaries of SAST
Explore the evolution of SAST in the "everything as code" era, examining challenges in analyzing infrastructure, contracts, and circuits, with focus on Bicep and Solidity languages.
Infostealer Malware - Understanding the Threat and Impact
Explore the dangers of infostealer malware and learn effective defense strategies. Gain insights into its mechanisms, potential impacts, and ways to protect your digital assets.
Zero Trust Threat Modeling - Implications for Application Security
Explore zero trust's impact on application security and threat modeling. Learn new design principles, threats, and approaches for effective zero trust threat modeling in modern environments.
Scaling Content Security Policy: Enterprise Compliance and Third-Party Resource Management
Learn to implement Content Security Policy and monitor web resources at scale, addressing supply chain attacks and PCI requirements for enhanced frontend security in enterprise applications.
Open Software Supply Chain Attack Reference (OSC&R) - OWASP Foundation
Explore the OSC&R framework for software supply chain security, analyzing real-world attacks and improving DevSecOps programs to enhance overall security posture.
Reversing Robots and Bypassing Security: Hacking Vacuum and Lawn Robots
Explore reverse engineering and security vulnerabilities in Ecovacs robots, uncovering potential privacy risks and methods to gain root access for custom software implementation.
Enterprise Ready Workshop - Automate with No-Code Okta Workflows
Automate customer-specific reporting for SaaS apps using Okta Workflows. Learn to enhance identity maturity and streamline enterprise systems through no-code automation techniques.