VEXing Open Source Security - Vulnerability Data for Everything
Explore the Vulnerability Exchange Format (VEX) standard for improving vulnerability management in open source projects and enterprise software security.
Antitrust Laws and Open Technology Project Participation
Explore antitrust and competition law implications in open source collaborations, understanding risks and best practices for legal compliance in multi-company tech projects.
What's in a Name - Vulnerabilities, SBOMs, and the Challenge of Software Identity
Explore software identity challenges in supply chain security, examining existing naming standards, potential risks, and collaborative solutions for effective vulnerability management.
Securing Your Open Source Supply Chain
Explore software supply chain security threats and learn from SUSE's journey to secure open source codebases. Gain insights on certifications, processes, and tools for enhancing supply chain protection.
SBOMs: Essential for Embedded Systems
Explore the importance of Software Bill of Materials (SBOM) in embedded systems, regulatory expectations, and implementation in open source projects for improved cybersecurity and risk management.
Dynamic Scheduler Over FreeRTOS
Explore dynamic scheduling in FreeRTOS, covering design considerations, implementation components, and state machines. Learn to optimize real-time task management for embedded systems.
Dependencies: Do's and Don'ts - Managing Application Dependencies Securely
Learn best practices for managing dependencies in software development, balancing security risks with benefits to team velocity and business value. Discover preventive measures to minimize vulnerabilities.
Risk Management When Using Open-source Software in Medical Devices
Explore strategies for managing risks associated with open-source software integration in medical devices, ensuring safety and compliance in healthcare technology development.
Vulntology - A Methodology to Characterize Vulnerabilities with Granular and Intuitive Structure
Explore a methodology for characterizing vulnerabilities with granular, intuitive structure. Learn about vulnerability objects, scenarios, barriers, actions, and impacts in cybersecurity.
Hidden Vulnerabilities in Open Source
Explore hidden vulnerabilities in open source software with experts from Palo Alto Networks, uncovering potential risks and learning strategies for enhanced security.
Hijacking.gov.uk - Identifying and Communicating Risks to the Digital State
Explore digital security risks in government domains and learn effective strategies for identifying and communicating vulnerabilities to protect critical online infrastructure.
A Different Kind of S3 - First Line Security of the Supply Chain
Explore innovative approaches to supply chain security, focusing on first-line defense strategies and cutting-edge solutions for robust protection against emerging threats.
Preparing for Zero-Day: Vulnerability Disclosure in Open Source Software
Learn strategies for handling vulnerability disclosures in open source projects, including best practices for communication and mitigation, to enhance software security and protect against potential attacks.
From Log4shell to OpenSSL - Reflections on a Year of Open Source Software Security
Explore the impact of Log4shell on open source software security, progress made, and future challenges. Gain insights into enhancing OSS security and its role in critical infrastructure.
Securing Open Source Through Threat Modeling
Learn to identify attack surfaces and secure open source projects through threat modeling. Discover techniques to find vulnerabilities, analyze risks, and enhance software security.
Ketchup, Mustard, and Relish of Software Supply Chain Security - Panel Discussion
Explore open source standards and tools for enhancing software supply chain security with industry experts. Learn about S2C2F, SLSA, and FRSCA, their benefits, and how to implement them effectively.
Security Advisory Programs: Creating Transparency in Software Supply Chain
Strategies for implementing transparent security communications programs in software products, addressing customer demands for vulnerability disclosure and open source patching accountability.
How Cybertrust Japan is Tackling OSS Security to Improve Our Digital Universe
Explore Cybertrust Japan's initiatives to enhance open-source software security, their impact on products and services, and their vision for a safer digital universe.
Mobilizing the Open Source Industry for Better Security by Default
Explore strategies to enhance open source security through industry collaboration, focusing on default protections and collective action for safer software ecosystems.
Automated Techniques for Measuring Trustworthiness of Open Source Code and Communities
Explore cutting-edge tools and methods for analyzing software security, determining project trustworthiness, and measuring against best practices in open source development.
What You Need to Know and Do About Vulnerability Disclosure
Learn about coordinated vulnerability disclosure in open source projects, its importance for security, and implications for maintainers and users.