The Cedar Language and Policy-Based Authorization - Episode 1
Explore policy-based authorization with AWS scientist Emina Torlak, discussing Cedar language, access control, and separating authorization logic from application code for improved security and management.
Shift-Left DevOps for APIs with Okta and JFrog - Developer Day 2021
Strengthen your shift-left DevSecOps strategy by automating REST API security validation using Okta and JFrog. Learn to verify authentication and authorization policies before production release.
A Developer's Guide to SAML
Learn SAML protocol essentials, implementation in modern applications, and troubleshooting tips. Gain insights into this widely-used identity security standard and its nuances across different applications.
State of Intel SGX in Linux
Comprehensive overview of Intel SGX support in Linux, covering kernel interface, features, and confidential computing run-times. Explores the maturing SGX ecosystem and its status as a mainline kernel technology.
Introducing IO Devices into Trusted Execution Environments
Explore security and software changes for IO support in trusted execution environments, focusing on confidential computing and hardware-based TEEs like Intel SGX and TDX.
Baking a Cake with Supply Chain Tooling - Securing Software from Scratch
Explore software supply chain security from an engineer's perspective, discussing tools, standards, and solutions for securing software from scratch.
World Health Organization's OSPO: Collaborative Intelligence for Strengthening Global Health Security
Exploring WHO's approach to global health security through collaborative intelligence, open innovation, and the establishment of an Open-Source Program Office for strengthening public health decision-making.
How Open Source Helps a Grid Operator with Energy Transition Challenges
Explore how open source projects like OpenSTEF and Power Grid Model help Dutch grid operator Alliander address energy transition challenges and support renewable energy adoption.
DSP Development with Xtensa HIFI Support in Clang - Open Source Audio Processing
Explore Xtensa HIFI DSP support in Clang, unlocking open-source audio component development for Sound Open Firmware. Learn about VLIW, SIMD capabilities, and challenges in porting Clang to new architectures.
Gitsign - Keyless Git Commit Signing
Explore Gitsign, a Sigstore project enabling keyless Git commit signing. Learn its functionality, integration with Sigstore, and application in development, CI/CD, and GitOps workflows.
Improving Bootup Performance of Containers with Overlay Images in TEE Environments
Optimizing container bootup in TEE environments: Accelerating image downloads, reducing key negotiation overhead, and offloading image decryption for improved performance and security.
Fusion of Sensors and Robots for Cyber-Physical Systems
Explore innovative sensor-robot fusion and AI integration for adaptive robotics in variable environments, showcasing SSES research and open software development.
High-Level API Security with Keycloak - FAPI Implementation and Conformance
Explore high-level API security using Keycloak, focusing on OAuth 2.0, FAPI, and advanced features for robust authorization in digital transformation contexts.
Time-Sensitive Networking with Mainline Embedded Linux
Explore Time-Sensitive Networking (TSN) features, standards, and implementations in embedded Linux, including hardware examples, benchmarks, and live demonstrations of audio/video use cases.
The Two-and-a-Half Ton Digital Twin: Automotive Applications of the Actor Model and Reactive Streams
Explore digital twin technology and reactive architectures in automotive applications, covering connected, electric, and autonomous vehicles across embedded, edge, cloud, and enterprise environments.
Composing the Ultimate SBOM - Creating Accurate and Modular Software Bill of Materials
Explore a modular approach to creating accurate Software Bills of Materials (SBOMs) using Micro-SBOMs, enhancing software security and compliance tracking beyond traditional post-build methods.
Improving Package Repository Security - From White Papers to Practice
Explore package repository security challenges, modern practices, and collaborative solutions for improving community repositories like PyPI and NPM.
Board Farms for Everyone - Making Hardware Debugging Easier and Sharing Boards Across the Globe
Discover how to create a board farm for remote hardware debugging, simplifying development and enabling global collaboration. Learn practical tips for setup, integration, and efficient device management.
Securing CI/CD Pipelines Through Security Gates
Explore CI/CD pipeline security gates, frameworks, and best practices. Learn to embed security seamlessly in DevOps workflows and eliminate issues before production. Includes live demo.
What's in a Name - Vulnerabilities, SBOMs, and the Challenge of Software Identity
Explore software identity challenges in supply chain security, examining existing naming standards, potential risks, and collaborative solutions for effective vulnerability management.
Exploring I/O Support for Virtualization-Based Trusted Execution Environments
Explore I/O support options for Trusted Execution Environment VMs, discussing software, hardware, and device requirements for secure data processing in confidential computing workloads.