Google SLSA and NIST SSDF - Emerging Software Supply Chain Security Best Practices
Explore emerging best practices for software supply chain security, focusing on Google's SLSA framework and NIST's SSDF guidelines to enhance your organization's cybersecurity posture.
Summing Up the OpenSSF Summit - May 2022 Gathering and Action Plan
Experts discuss OpenSSF's May 2022 summit, addressing open source security challenges, government involvement, and future initiatives for enhancing software supply chain resilience.
What Role Do Package Registries Have in Securing the Supply Chain?
Explore the critical role of package registries in supply chain security, focusing on their impact, challenges, and best practices for enhancing software integrity and reliability.
Open Source Cybersecurity - Addressing Challenges in Software Security
Explore open source cybersecurity challenges and solutions with industry experts, discussing survey findings, enterprise impacts, and automation strategies for improved software security.
Addressing Cybersecurity Challenges in Open Source Software
Insights on addressing cybersecurity challenges in open source software, including organizational priorities, improvement strategies, and policy drivers. Live panel discussion of key findings from Snyk and Linux Foundation research.
GitBOM - Repurposing Git's Graph for Supply Chain Security and Transparency
Explore innovative use of Git's graph structure for enhancing software supply chain security and transparency, offering insights into modern cybersecurity practices.
Software Supply Chain Threat Landscapes - A Moving Target
Explore evolving software supply chain threats and learn strategies to protect your organization from vulnerabilities, malicious attacks, and emerging risks in the digital ecosystem.
Practical Security in Web Applications
Explore effective methods to identify and avoid common security pitfalls in web applications. Learn to build secure enterprise web presence and protect against vulnerabilities.
A Development Environment for DO-178C Level D Certified Linux
Explore Yocto/OpenEmbedded for managing distributed development, automated build/test, and delivering DO-178C level D certified Linux. Learn about traceability, team dynamics, and extensibility in aviation software.
Contributing AI-Generated Content to OSS Projects - Navigating Legal, Copyright, and Other Risks
Explore legal risks and practical guidance for responsibly incorporating AI-generated content in open source projects, addressing copyright challenges and evolving legislation.
How Do You Know You're Done After a Security Fix - Leveraging SBOM Data
Explore approaches for leveraging SBOM data to improve automation and confidence in safety analysis after applying vulnerability fixes in systems with safety considerations.
Stopping Patent Trolls - Why Open Source Urgently Needs Your Help Now
Urgent call to action: Learn about the threat of patent trolls to open source communities and how to defend against proposed rule changes that could embolden them further.
The Trials and Triumphs of Maintaining Devboards in AOSP - A Developer's Diary
Explore the challenges and successes of maintaining development boards in AOSP, including keeping up with changes, supporting new features, and addressing breakages in the Android ecosystem.
LF Research and Sustainability Initiative: Measuring Open Source Impact on Sustainable Future
Exploring Linux Foundation's sustainability initiatives, research projects, and impact measurement efforts to advance global collaboration for a more sustainable future.
The Supply Chain Conundrum: Why Traditional Application Security Is Failing Us
Explore why traditional app security falls short in protecting against supply chain attacks. Learn proactive, attacker-centric approaches and best practices to safeguard your software development process.
Open Source Innovation - Empowering Telcos to Own Their Destiny
Explore how open source innovation empowers telecom companies to control their future and drive industry transformation through collaborative development and shared resources.
SMT Solvers in IT Security - Deobfuscating Binary Code with Logic
Explore SMT solvers for deobfuscating binary code in IT security. Learn practical applications, theoretical limitations, and solutions for enhancing malware analysis and vulnerability identification.
Building a Software Security Program
Discover how to build a comprehensive Software Security Program addressing people, process, and technology challenges in software development, reducing risk and improving efficiency.
Find and Fix Software Security Problems - Preventing Security Mistakes
Explore effective strategies for identifying, fixing, and preventing software security issues. Learn how to prioritize and address vulnerabilities to enhance overall system security.
OWASP Security Knowledge Framework
Learn about the OWASP Security Knowledge Framework, its features, and how it can enhance your application security practices through this informative presentation by the project creators.
Only an Electron Away from Code Execution
Explore vulnerabilities in Electron-based applications and learn techniques for achieving code execution, presented by security researcher Silvia Väli at Hack.lu 2018.