Continuous Assurance of Supply Chain Security Levels of Open Source Artifacts Using SLSA 0.1
Discover how to verify SLSA provenance in trusted build systems to enhance supply chain security and protect against modified sources, compromised builds, and package tampering.
The Power of Confidential Computing - Exploring Open Source Projects
Explore how confidential computing revolutionizes data security through open-source projects, focusing on real-world applications from finance to human trafficking prevention and secure data processing.
Back to Security Basics: Evaluating, Consuming, and Contributing Open Source Software
Discover essential strategies for evaluating and securing open source software through maintenance assessment, vulnerability management, and community engagement practices for safer implementation.
Why Is My Software on Fire? - Understanding Software Versioning and Supply Chain Security
Discover essential software versioning practices and supply chain management principles to enhance security and prevent hazards in open source development.
QEMU-Native Hooking Bridge for Binary Fuzzing
Explore advanced binary fuzzing techniques through QEMU-Native Hooking Bridge, offering improved instruction hooking and memory control for efficient vulnerability detection in compiled code without source access.
Navigating the Open Source Policy Labyrinth: Unraveling Global Policy Efforts for a Secure Future
Explore global policy initiatives shaping open-source software security, from US Executive Orders to EU regulations, while understanding how modern frameworks like SLSA and Software Self Attestation enhance digital infrastructure.
Validating Kubernetes Webhook Controllers - A Framework for Testing and Monitoring
Discover how to validate Kubernetes webhook controllers using Lula, enabling systematic testing and monitoring of critical security functions in evolving cluster environments.
Trojan Model Hubs: Hacking the ML Supply Chain and Defending Against Model Serialization Attacks
Discover essential strategies for protecting ML systems from supply chain attacks, focusing on model scanning and cryptographic signing to defend against Model Serialization Attacks in public model hubs.
Solving Air-Gap Problems the Cloud Native Way with Zarf
Discover how to streamline Kubernetes deployments in air-gapped environments using Zarf, enabling efficient packaging and deployment of workloads while maintaining supply chain visibility through automated SBOM creation.
Meeting the OpenSSF Security Baseline with Minder
Discover how Minder platform helps monitor and ensure OpenSSF Security Baseline compliance across repositories, with practical demonstrations of automated security posture management.
ClearlyDefined: A Crowdsourced Database of Licensing Metadata for Supply Chain Compliance
Discover how ClearlyDefined simplifies software licensing compliance through its crowdsourced database, API integration, and automated metadata management for efficient supply chain security.
Secure AI Orchestration: Mitigating Model-centric Attacks with Flyte
Discover how to protect AI systems from model-centric attacks, focusing on code injection and LLM vulnerabilities, while implementing security measures using Flyte orchestration and open-source tools.
From Cosign to an Ecosystem - The Evolution of Sigstore
Explore the evolution of Sigstore's software security ecosystem, from its core components to advanced integrations for package managers, CI workflows, and policy enforcement tools.
Phantom Dependencies in AI and ML Projects - Managing Hidden Software Dependencies
Discover how phantom dependencies impact AI/ML projects and learn effective strategies for identifying, managing, and securing these hidden software dependencies in your applications.
The Current State of Software Bill of Materials (SBOMs) for End Users
Explore the challenges and opportunities of Software Bill of Materials (SBOMs), examining current implementation issues, regulatory requirements, and emerging solutions through OpenSSF projects like Protobom and bomctl.
End-to-End Secure Machine Learning Development - Building a Secure AI Supply Chain
Discover essential security practices for AI development, from dataset handling to production deployment, focusing on supply chain security, model provenance, and risk mitigation in machine learning applications.
Automated Malware Attribution Engines - Understanding Cybercriminal Group Detection
Discover how automated malware attribution engines analyze and classify cyber threats by comparing code, tactics, and infrastructure patterns to identify cybercriminal groups and predict future attacks.
Design and Development of a Multi-Tenant SIEM Using Security Onion
Discover how to design and implement multi-tenant capabilities in Security Onion SIEM, enabling efficient management of multiple organizations while maintaining secure access control and streamlined alert monitoring.
BadUSB Attacks on MacOS - Beyond Using Terminal and Shell Commands
Discover advanced BadUSB attack techniques for MacOS, leveraging Apple-signed LOLBINs and native scripting languages to execute stealthy code without terminal commands.
Exploring Security Vulnerabilities in Flutter Mobile Applications
Discover critical security vulnerabilities in Flutter apps through reverse engineering techniques, focusing on hardcoded credentials and using tools like B(l)utter to analyze and protect mobile applications.
Powering the Global Digital Identity Revolution
Discover how digital identity is evolving globally through OpenWallet Foundation's innovative approach to creating secure, interoperable digital credential solutions for the future.