Realities of SBOM - What Is Under the Hood of Software Bill of Materials
Explore the complexities of Software Bill of Materials (SBOM) beyond dependency files, including interdependencies, integrity, and vulnerability monitoring across the software development lifecycle.
Bringing Provenance to Open Source - Lessons from Npm's Sigstore Integration
Explore npm's integration with Sigstore to enhance package provenance, addressing security challenges and implications for the broader open-source ecosystem.
Mentorship Session - Tools and Techniques to Debug an Embedded Linux System
Explore essential tools and techniques for debugging embedded Linux systems, covering user space and kernel space, to improve quality and efficiently find/fix bugs.
How Cybertrust Japan is Tackling OSS Security to Improve Our Digital Universe
Explore Cybertrust Japan's initiatives to enhance open-source software security, their impact on products and services, and their vision for a safer digital universe.
Delivering Security Fixes Continuously Into Your Embedded Linux
Learn strategies for continuous security updates in embedded Linux systems, focusing on update models, test automation, and minimizing out-of-tree code. Explore real-world examples using EMLinux and open-source contributions.
Understanding the Role of Software Bill of Materials in Cybersecurity Readiness
Explore the importance of Software Bill of Materials (SBOMs) in cybersecurity, including adoption challenges, implementation benefits, and strategies for improving production and consumption rates.
Securing the Software Supply Chain: From Threats to Best Practices
Comprehensive overview of software supply chain security, covering history, threats, initiatives, challenges, and best practices. Experts discuss key issues and solutions for organizations.
Global Software Vulnerability Standard Birds of a Feather Discussion
Explore the Global Software Vulnerability Standard (GSVS) in this Linux Foundation discussion, addressing key aspects of software security and vulnerability management.
Mobilizing the Open Source Industry for Better Security by Default
Explore strategies to enhance open source security through industry collaboration, focusing on default protections and collective action for safer software ecosystems.
Automated Techniques for Measuring Trustworthiness of Open Source Code and Communities
Explore cutting-edge tools and methods for analyzing software security, determining project trustworthiness, and measuring against best practices in open source development.
Hacking for Developers
Learn ethical hacking techniques, tools, and methodologies to enhance your development skills and improve software security. Gain insights into vulnerability assessment and exploitation.
Authenticating Supply-chain Metadata - Building Remote Code Attestations on GitHub
Explore techniques for authenticating supply-chain metadata and building remote code attestations on GitHub, enhancing software security and integrity in the development process.
Finding the Path from Embedded to Edge Using Product Lines
Explore the evolution from embedded to edge computing, focusing on product lines, maintenance, open source, and container frameworks for efficient development and deployment.
SBOMs for Embedded Systems - What's Working, What's Not
Explore challenges and successes in implementing Software Bill of Materials (SBOMs) for embedded systems, discussing regulatory impacts, generation methods, and practical applications.
How to Choose a Software Update Mechanism for Embedded Linux Devices
Explore software update mechanisms for embedded Linux devices, covering build systems, update types, containers, and open-source solutions like RockRock and Mandrake.
Corporate Use of Embedded Linux
Explore corporate challenges and strategies for embedded Linux, including upstream drivers, compliance, and testing, with insights from Sony Corporation.
VEX Overview - Cybersecurity and Infrastructure Security Agency
Explore VEX with cybersecurity expert Allan Friedman, gaining insights into this crucial aspect of infrastructure security and its implications for modern digital systems.
Using FOSS as Part of a System Safety Mechanism
Explore the integration of Free and Open Source Software (FOSS) in system safety mechanisms, addressing challenges and discussing practical implementation strategies.
All About That BOM - Understanding Software Bill of Materials
Explore software supply chain security with a focus on Software Bill of Materials (SBOM), its importance, and implementation strategies for enhanced transparency and risk management.
Women's Participation in Open Source
Explore women's involvement in open source projects, challenges faced, and strategies for increasing diversity and inclusion in the tech community.
Supply Chain Security, SBOMs and OSPOs: An Ecosystem and Compliance Update
Explore cybersecurity, regulatory compliance, and software supply chain integrity. Learn about SBOMs, the Open Source Security Foundation, and the role of OSPOs in enhancing security.