Developing a Secure, Open Future
Explore OpenSSF's initiatives to enhance open source security through developer-focused tools, documentation, and expert guidance for improved coding practices and supply chain security.
Application-Aware Layer-7 Security Framework for Cloud APIs Using Large Language Models
Explore an innovative security framework leveraging LLMs to prevent application layer threats against cloud API workloads, enhancing policy definition and enforcement across applications.
Patterns and Anti-Patterns in Embedded Development - What Security Incidents of 2023 Teach Us
Explore security incidents from 2023 in embedded Linux, revealing development patterns and anti-patterns. Learn from real-world examples to improve embedded system security and avoid common pitfalls.
Securing Connections: Defending Telco Workloads in the Cloud Era
Explore security challenges in 5G networks, attack vectors, and mitigation strategies for telco workloads in the cloud era. Learn about automated security measures for distributed networks.
Benefits of Automated Open-Source Intake Management
Explore automated open-source intake management to tackle compliance challenges, mitigate risks, and improve efficiency in software development. Learn from industry data and expert insights.
Zephyr Extensions - Dynamically Loading Applications
Explore dynamic application loading in Zephyr, revolutionizing firmware updates. Learn about hotfixes, cybersecurity implications, and open-source development in enterprise settings.
Improving Supply Chain Integrity with OpenSSF Technologies - Panel Discussion
Experts discuss OpenSSF technologies like SLSA, S2C2F, and GUAC, exploring their impact on open source security and software supply chain integrity. Learn about implementation and improving security posture.
OSS Supply Chain Threats and Why You Need a Holistic Security Strategy
Analyze 13 real-world threats to open source components and learn how to mitigate risks using the OpenSSF's Secure Supply Chain Consumption Framework for a holistic security strategy.
A Step Closer to Secure Development: Using in-Toto and OPA Gatekeeper to Verify Artifact Integrity
Explore securing software supply chains using in-toto, Witness, Archivista, and OPA Gatekeeper. Learn to verify artifact integrity from development to Kubernetes deployment.
Embracing AI in Education: A Path to Inclusive and Effective Learning
Explore AI's potential in education, addressing benefits, risks, and best practices for inclusive learning. Learn about generative AI, predictive tutoring, and strategies for responsible integration.
APERTIS - A Collaborative Industrial Grade Linux Construction Kit
Explore APERTIS, a Debian-based Linux for embedded products. Learn about package selection, hardening, license compliance, and cloud CI integration for efficient development of industrial-grade systems.
Securing Your Supply Chain with an Open Source Ecosystem
Explore open-source tools and best practices for securing software supply chains across creation, build, deployment, and runtime stages. Learn to leverage automation and DevSecOps to reduce vulnerabilities.
The World of Spyware for Rent - Nullcon Berlin 2024
Explore the world of commercial spyware with cybersecurity expert Fred Raynal. Gain insights into the industry, its impact, and the latest developments in this controversial field of digital surveillance.
New Threats to Multi-Factor Authentication - 2FA2Furious
Explore evolving threats to multi-factor authentication and learn innovative approaches to enhance application security without compromising user experience.
Secure File Upload Handling - Best Practices and Strategies Using CDN and Object Storage
Comprehensive guide on secure file upload handling, covering HTML, JavaScript, Node.js, object storage, CDNs, and security best practices for developers.
EV Charging Stations Security - Free of Charge
Explore vulnerabilities in EV charging stations, including physical security weaknesses, OCPP protocol issues, and charging card security flaws. Learn about potential exploits and necessary security measures.
Practical Guides for Enhancing Your Software Supply Chain Security
Practical guide to fortify software supply chain security using open-source tools. Covers building, packaging, dependencies, code scanning, and establishing trust across the delivery process.
Resilience in Action: Building Adaptive Socio-Technical Systems
Explore strategies for building resilient socio-technical systems, focusing on everyday tasks and cross-disciplinary research to enhance organizational adaptability and preparedness for unexpected incidents.
Mastering Web Security - Myths, Strategies and Challenges
Debunking security myths and exploring effective strategies for web application protection. Practical insights on vulnerabilities, defense mechanisms, and organizational approaches to enhance cybersecurity.
The Cybersecurity Framework at 10 and Beyond - NIST's Evolution and Impact
Explore the evolution and impact of NIST's Cybersecurity Framework, its global adoption, and upcoming Version 2.0 release with industry experts and NIST leaders.
Mastering AI-Driven Cloud Security - A New Era of Remediation
Explore AI-driven cloud security remediation techniques, enhancing protection against evolving threats in cloud-native environments.