Supply Chain and Emerging Technology Threats - Balancing Innovation and National Security
Explore geopolitical tensions between China and the US, focusing on innovation, national security, and technology. Experts discuss strategies for balancing progress with safety in a complex global landscape.
Confronting the Chinese Cyber Threat - 2018 Aspen Cyber Summit
Explore China's cyber tactics, their impact on U.S. interests, and strategies to address this geopolitical challenge in a discussion with leading cybersecurity experts.
Secure Application Design with High Data Privacy Requirements
Explore secure application design strategies for high data privacy, covering identity management, cryptography, logging, and risk management practices.
Offensive Threat Models Against the Supply Chain
Applying adversarial threat models to supply chain systems, focusing on realistic attack patterns and emulating cybercriminal tactics to enhance defensive measures and risk reduction strategies.
Changed Responsibilities in Modern Development Practices
Explore how modern development practices like CI/CD and DevOps impact application security. Learn strategies for integrating security early in the development lifecycle and empowering developers with essential security skills.
OWASP CycloneDX - Software Bill of Materials Standard
Explore OWASP CycloneDX, a lightweight software bill of materials (SBOM) standard, with experts Steve Springett and Patrick Dwyer. Learn about its features, applications, and importance in modern software development.
Mitigate Risks in Code - Protect Your Software-based Supply Chain
Explore strategies to mitigate risks in code and safeguard your software-based supply chain, enhancing overall security and resilience in software development.
Supply Chain Security with Dependency Track
Explore supply chain security using Dependency Track with experts Anandan, Bhargava, and Duster. Learn strategies to mitigate risks and enhance software security in this informative session.
Security Begins with Secure Development Environments
Explore supply chain security threats in development environments, focusing on vulnerabilities in Visual Studio Code extensions and their potential for remote code execution.
Securing the Software Supply Chain with TUF and Docker - Protecting Against Distribution Attacks
Explore secure software updates with TUF framework, focusing on key revocation, mitigating attacks, and integrating with Docker's Notary for enhanced software supply chain security.
Transatlantic Solidarity in Times of COVID-19 - A Bipartisan Congressional Perspective
Bipartisan US congressional perspective on transatlantic solidarity during COVID-19, addressing cooperation, trade, NATO's role, geopolitical impacts, and legislative involvement.
EU's Efforts to Secure Open Source Software
Explore EU's approach to securing open source software, comparing it with US strategies and examining Ireland's role in addressing OSS supply chain threats.
Supply Chain Armoring: Tools and Techniques for Open Source Projects
Explore tools and techniques for securing open source supply chains, addressing urgent issues and US Executive Order requirements for critical software protection.
Zero-Trust Supply Chain Security with Sigstore, TektonCD and SPIFFE
Explore cutting-edge tools for enhancing software supply chain security, focusing on Sigstore, TektonCD, and SPIFFE implementations in zero-trust environments.
A Different Kind of S3 - First Line Security of the Supply Chain
Explore three core areas for securing the software supply chain: Software Bill of Materials (SBOM), Signing, and Slimming. Learn practical methods to enhance first-line security controls and minimize attack surfaces.
Uncovering Software Provenance in Embedded Systems
Explore techniques for tracing software origins in embedded systems, enhancing security and compliance in IoT and edge computing environments.
A Different Kind of S3 - First Line Security of the Supply Chain
Explore innovative approaches to supply chain security, focusing on first-line defense strategies and cutting-edge solutions for robust protection against emerging threats.
SLSA Conformance - Understanding Build System Requirements and Trust Decisions
Explore SLSA framework for software artifact integrity, build system requirements, conformance program, and trust decision enforcement in supply chain security.
Open Source Supply Chain Security - Are Containers the Biggest Blind Spot?
Experts discuss open source supply chain security, focusing on container vulnerabilities, SBOMs, and best practices for managing security in modern engineering toolchains.
Supply Chain Security: From Infrastructure to Application, Code to Cloud
Explore best practices for securing the entire software supply chain, from infrastructure to application, covering code, cloud, dependencies, and deployment.
Authenticating Supply-chain Metadata - Building Remote Code Attestations on GitHub
Explore techniques for authenticating supply-chain metadata and building remote code attestations on GitHub, enhancing software security and integrity in the development process.