Open Source Runs the World - Why Not Vulnerability Identifiers?
Explore the critical role of open source in vulnerability identification and management, emphasizing its potential to enhance global cybersecurity efforts.
Code Aware Services for Vulnerability Detection - Welcome Back and Remarks
Explore Code Aware Services for complex software security. Learn about build tracing, source code processing, and tools for vulnerability detection in large-scale projects like Android Linux kernel.
Impact of Open Source Adoption on Software Security
Explore the impact of open source on software security with insights from Linux Foundation and Snyk's joint research, covering key findings and industry trends.
Securing Open Source Through Threat Modeling
Learn to identify attack surfaces and secure open source projects through threat modeling. Discover techniques to find vulnerabilities, analyze risks, and enhance software security.
Curating and Securing Open Source for GovCloud
Explore automated workflows for curating and securing open-source libraries in air-gapped environments, enhancing developer experience while maintaining strong controls over third-party packages.
Bringing Provenance to Open Source - Lessons from Npm's Sigstore Integration
Explore npm's integration with Sigstore to enhance package provenance, addressing security challenges and implications for the broader open-source ecosystem.
Toto-Ally TUF: Simple Tools for a Secure Software Supply Chain
Learn to secure software supply chains using in-toto and TUF frameworks. Explore their integration, real-world applications, and new open-source tools for enhanced protection against cyber threats.
Verifying the Validity of Crowd-Sourced Results in Open Source Security - The Scorecard GitHub Action and Sigstore
Explore how the Scorecard GitHub Action ensures security in open-source projects, using Sigstore for result integrity and remote attestation in crowd-sourced data validation.
Software Supply Chain Security Case Study at Anaconda
Explore real-world experiences in securing a large-scale open-source packaging pipeline, addressing challenges, implementing solutions, and achieving positive outcomes using respected security designs.
Implementing OpenSSF Best Practices Badges and Scorecards for Project Security
Learn to enhance open-source project security using OpenSSF Best Practices Badges and Scorecards. Gain practical tips for implementation and addressing common issues to improve your project's security posture.
Open Source Software Security Mobilization Plan - Press Briefing
Executives announce Open Source Software Security Mobilization Plan, outlining ten investment streams to enhance open source software resilience and security following a summit with industry and government leaders.
Automated Techniques for Measuring Trustworthiness of Open Source Code and Communities
Explore cutting-edge tools and methods for analyzing software security, determining project trustworthiness, and measuring against best practices in open source development.
A Vulnerability Database Should Not Be About Vulnerabilities
Explore innovative approaches to vulnerability databases, focusing on package-centric models, data aggregation, and addressing common issues in cybersecurity information management.
Malicious Package Trends Compared with Malware Evolution
Explore malicious package trends and their parallels with malware evolution, gaining insights into cybersecurity challenges and strategies for protecting software supply chains.
All About That BOM - Understanding Software Bill of Materials
Explore software supply chain security with a focus on Software Bill of Materials (SBOM), its importance, and implementation strategies for enhanced transparency and risk management.
Building a Software Security Program
Discover how to build a comprehensive Software Security Program addressing people, process, and technology challenges in software development, reducing risk and improving efficiency.
DOS Software Security - Patching a 25-Year-Old Vulnerability
Explore a 25-year-old vulnerability in DOS software, examining its implications and the challenges of addressing legacy security issues in outdated systems.
Find and Fix Software Security Problems - Preventing Security Mistakes
Explore effective strategies for identifying, fixing, and preventing software security issues. Learn how to prioritize and address vulnerabilities to enhance overall system security.
The Path Towards Automated Heap Exploitation
Explore automated heap exploitation techniques and strategies for enhancing cybersecurity defenses in this insightful conference talk by Thaís Moreira Hamasaki.
Maintaining The Update Framework (TUF) - Insights and Contributions
Insights into maintaining The Update Framework (TUF) for secure content delivery, covering organization, implementation, and community involvement in software supply chain security.
Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling
Explore threat modeling for Kubernetes CI/CD security using SLSA standards. Learn to identify and mitigate vulnerabilities in supply chain processes, with practical insights from Tekton's implementation.