Managing Supply Chain Risk in a World of AI-Assisted Developers
Explore strategies for mitigating security risks associated with AI coding assistants, focusing on safe code integration and leveraging open-source tools to enhance software supply chain security.
Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem
Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development and usage.
The Critical Path to Implant Backdoors and Potential Mitigation Techniques: Learnings from XZ Utils
Analyze the critical attack path of XZ Utils backdoor and explore mitigation strategies for supply-chain attacks in open-source software.
Quantitative Robustness for Vulnerability Assessment
Explore quantitative robust reachability for measuring bug triggering difficulty in software security. Learn about QRSE and functional E-MAJSAT for improved vulnerability assessment.
Eating the Open Source Security Sandwich with Skootrs
Explore Skootrs, an open-source tool simplifying adoption of security practices for software developers through automation and guardrails.
A Beginner's View of Public Instances
Explore OpenSSF's public instances: hosting, scale, security, and usage guidelines. Gain insights into tools for safer software development and protection against attackers.
Presenting the OSTIF Independent Security Audit Impact Report
Explore OSTIF's 2022 security improvements to critical open source projects, funded by OpenSSF. Learn about the initiative's background and key outcomes.
Getting Involved in Sigstore Research Projects
Explore Sigstore's research opportunities in privacy-conscious transparency, stronger verification assurances, and distributed trust timestamping. Learn how to contribute to this open-source project.
Improving Posture of Critical OSS Projects with Security Audits
Explore effective security audits for open source projects, including top vulnerabilities, lessons learned, and common mistakes to avoid. Enhance your OSS security posture.
Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem
Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development.
Sigstore: Past, Present and Future Directions
Explore Sigstore's journey, impact on OSS code signing, and future plans. Learn about its adoption by major projects and integration efforts with package managers.
OWASP Dep-scan: Analyzing Dependencies for Security Vulnerabilities
Explore OWASP Dep-scan, a powerful tool for identifying vulnerabilities in third-party dependencies, enhancing software security and streamlining the development process.
XZ Backdoor - Navigating the Complexities of Supply Chain Attacks Detected by Accident
Explore the intricacies of supply chain attacks through the lens of the XZ Backdoor incident, uncovering detection methods and implications for cybersecurity professionals.
Assessing Third-Party Libraries More Easily with Security Scorecards
Learn to evaluate third-party library security efficiently using Security Scorecards, enhancing your ability to assess and mitigate potential vulnerabilities in software dependencies.
Automating Security Test Cases Based on ASVS
Learn to automate security test cases using ASVS, enhancing your application's vulnerability assessment and overall security posture.
Security Pitfalls with Exec Commands in Software Integrations - A Quick Story
Explore security risks in software integrations, focusing on command injection attacks. Learn detection methods, prevention techniques, and real-world vulnerability analysis through a case study.
Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation
Explore automated, risk-oriented vulnerability management strategies using SBOM, CSAF, and VEX to streamline processes and align remediation with genuine risk impacts.
Zero Downtime Credential Rotation - Strategies and Benefits
Learn strategies for safe credential rotation in complex systems without downtime. Explore design techniques to enhance system security and resilience while minimizing disruptions.
From ASCII to UTF-16: Leveraging Encodings to Break Software
Explore how character encodings can be exploited to compromise software security, from basic ASCII to complex UTF-16, in this technical IT security talk.
Intel's Experiences Using OpenSSF Scorecard to Better Secure Software Portfolio
Explore Intel's use of OpenSSF Scorecard to assess and mitigate software risks across their vast portfolio, learning from their experiences and challenges.
Learn Security Basics - Part 1
Explore security fundamentals with OpenSSF's Community Manager as she guides you through the initial stages of a comprehensive training program.