Forget Zero Trust - Aim to "Control the Controllables"
Explore strategies to prepare for future supply chain attacks, focusing on controlling key vulnerabilities and leveraging breach and attack simulation techniques.
Safeguarding UEFI Ecosystem - Firmware Supply Chain is Hardcoded
Explore UEFI ecosystem complexities, supply chain vulnerabilities, and challenges in firmware security. Learn about patch cycles, fix verification, and the impact of vulnerabilities on the entire ecosystem.
Mitigating Business Risks with Application Security
Explore strategies for mitigating business risks through application security, covering software assurance, supply chain management, and best practices for secure development.
Behind the Scenes - How Criminal Enterprises Pre-infect Millions of Mobile Devices
Uncover how criminal enterprises infiltrate mobile device supply chains to pre-infect phones with malware, exploring the risks and implications for users and businesses.
Cut Through Vulnerability Noise with Runtime Insights
Learn to prioritize security risks using runtime insights, reducing vulnerability noise by up to 95%. Discover techniques for analyzing Docker images, generating SBOMs, and correlating inventories with vulnerability databases for improved container secur…
Securing the Supply Chain for Your Java Applications
Explore strategies to secure Java application supply chains, focusing on dependency management, vulnerability scanning, and best practices for mitigating security risks in software development.
How to Build a Secure Supply Chain for Your Spring Apps
Learn techniques to secure your Spring application's supply chain, enhancing overall software security and mitigating potential vulnerabilities in dependencies.
The Various Shades of Supply Chain - SBOM, N-Days and Zero Trust
Explore supply chain security challenges in semiconductors, focusing on SBOMs, N-day vulnerabilities, and Zero Trust principles to enhance transparency and mitigate risks in firmware development.
Building Images for the Secure Supply Chain
Explore techniques to enhance container image security, reduce vulnerabilities, and improve supply chain integrity. Learn about minimizing dependencies, updating images, and using tools like apko for reproducibility and SBOM generation.
If You Can't Open It, You Don't Own It
Exploring hardware vulnerabilities and their impact on C++ systems, this talk delves into side-channel attacks, physical penetrations, and supply chain risks, offering insights for securing modern C++ designs.
Securing the Open Source Software Supply Chain
Explore tools and best practices for securing the open-source software supply chain, addressing vulnerabilities, and enhancing trust in the ecosystem. Learn about recent developments and future improvements.
Ergonomic Codesigning for the Python Ecosystem with Sigstore
Explore Sigstore's integration into Python packaging, covering cryptographic fundamentals, security models, and the benefits of codesigning without long-term key material for developers and users.
Help! My Cluster Is On The Internet - Container Security Fundamentals
Explore container and Kubernetes security fundamentals, covering supply chain and runtime security. Learn practical strategies to protect clusters and prevent vulnerabilities using real-world examples and essential tools.
Notary v2 Introduction and Status Report
Explore Notary v2: enhancing container signing infrastructure, addressing usability issues, and enabling broad adoption. Learn about registry-native signatures and the project's roadmap.
Notary v2 - Redesigning the Secure Supply Chain for Containers
Explore Notary v2's redesign for secure container supply chains, focusing on OCI registry-native protocols and improved ecosystem security based on community experience.
Notary v2 - Supply Chain Security for Containers
Explore Notary v2's advancements in container supply chain security, its integration with other initiatives, and its path to production. Learn about registry-native solutions and ongoing developments.
Helm - The Charts and the Curious
Explore tools and processes to enhance Helm Chart development and distribution, covering linters, testing tools, automation, supply chain security, and CI integration for improved workflows.
Project Trebuchet - How SolarWinds is Using Open Source to Secure Their Supply Chain in the Wake of the Sunburst Hack
SolarWinds' Project Trebuchet: Rebuilding secure software supply chain using CNCF and CDF projects after Sunburst hack. Insights on new build system, its necessity, and lessons learned from a major security breach.
Getting Started with Supply Chain Security is Easier Than You Think - Perspectives From a Highly Regulated Industry
Aprenda prácticas clave para mejorar la seguridad de la cadena de suministro de software, incluyendo auditoría, verificación y control de admisión, con perspectivas de la industria bancaria altamente regulada.
The State of SBOMs
Explore the current landscape of Software Bill of Materials (SBOMs) with industry experts, discussing challenges, best practices, and future trends in software supply chain security.
Supply Chain Security with the Jenkins Templating Engine
Comprehensive introduction to DevSecOps, exploring software security scanning and scaling principles using Jenkins Templating Engine for shared, tool-agnostic pipelines across teams.