Security Onion Essentials 2024 - Detection Engineering
Explore detection engineering in Security Onion 2.4.70, covering key techniques and best practices for enhancing network security and threat detection capabilities.
What is the OpenSSF? - An Introduction to the Open Source Security Foundation
Explore the OpenSSF's mission, structure, and initiatives to enhance open source software security with insights from Executive Director Brian Behlendorf.
Finding LibRaska: The Open Source Library that Props up our Infrastructure
Explore challenges in identifying and supporting critical, yet obscure open source packages that underpin infrastructure. Learn strategies to enhance security in open source supply chains.
What is OpenSSF? - Securing Open Source Software Supply Chains
Explore OpenSSF's mission to secure open source supply chains through automated tools, best practices, education, and collaboration.
Improving Global Software Supply Chain Security with Alpha-Omega
Explore the Alpha-Omega Project's framework for enhancing software supply chain security, focusing on critical and long-tail open source projects. Gain insights into this new OpenSSF initiative.
Effective Vulnerability Management for Over 400 Projects at the Eclipse Foundation
Discover how Eclipse Foundation streamlines vulnerability management across 400+ projects, enhancing security practices and reporting processes for researchers and developers.
What Makes a Project Critical? Discovering and Evaluating Popular Open Source Software
Discover criteria for evaluating critical open source projects and learn to assess their impact on infrastructure and society.
Driving Security at Scale: Principles for Package Repository Security - Lecture
Explore principles for enhancing package repository security, including a four-level maturity model. Learn about CISA's collaboration with OpenSSF to improve open source ecosystem security at scale.
Leveraging Sigstore Capabilities in a Local Environment
Explore Lockheed Martin's integration of Sigstore for secure, auditable software development. Learn about internal Kubernetes deployments, certificate authorities, and streamlined GitLab pipelines for enhanced security.
Beyond "Just Update All the Things": Uncovering the Nuances of Dependency Security
Uncover complexities of dependency security, explore OSV project solutions, and learn strategies for integrating vulnerability management into developer workflows.
Born of Hard Times - The Clean Dependency Project is Here to Help
Explore the Clean Dependency Project's proactive approach to OSS vulnerability management and learn how to contribute to this innovative open-source initiative.
Sigstore: 2024 and Beyond
Explore Sigstore's achievements, future roadmap, and vision for securing open source software. Learn about upcoming milestones and opportunities to contribute to this de-facto signing solution.
Deep Dive into the OpenSSF Mobilization Plan
Explore the OpenSSF Mobilization Plan for securing open source supply chains through automated tools, best practices, education, and collaboration.
Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain
Explore transparent digital signatures with Sigstore to enhance software supply chain security. Learn key techniques for protecting open source ecosystems.
Developer Security Essentials
Learn essential security practices for developers to protect open source software and strengthen supply chains.
Best Practices Make Perfect! How the OSSF is Improving Secure Development Education
Explore OpenSSF initiatives for improving open source security, including Scorecards, Best Practices badge, documentation, and secure software development training.
How's Your Supply Chain with Your Insecure OSS Ingestion?
Explore secure open source software ingestion and supply chain management strategies for enhanced cybersecurity in modern applications and infrastructure.
Securing Software Repositories - EMEA Friendly
Explore strategies for securing software repositories, focusing on best practices and tools to protect against vulnerabilities and ensure code integrity.
OSS-SIRT - Identify Core Services 2
Explore essential core services for open source security incident response teams, enhancing your ability to manage and mitigate security threats effectively.
Data Analysis Challenges in Cybersecurity
Explore cybersecurity data analysis challenges, tools, and solutions. Learn about security roles, threat detection, cloud security, and automated response systems to protect organizations from cyber threats.
Data Analysis Challenges in Cybersecurity
Explore data analysis challenges in cybersecurity, including event monitoring, threat detection, and intelligence gathering. Learn tools and solutions for effective cyber threat protection.