Malice in Chains - Supply Chain Attacks Using Machine Learning Models
Explore potential supply chain vulnerabilities in machine learning models and learn strategies to mitigate risks in AI-driven systems.
Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime
Practical guide to securing software supply chain using CNCF tools. Covers SLSA compliance, GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape for build-to-runtime security in Kubernetes ecosystems.
Enforceable Supply Chain Security Policy with OPA Gatekeeper and Ratify
Explore container supply chain security using OPA Gatekeeper and Ratify. Learn to enforce policies, verify images, and establish trust in deployments for a more secure container ecosystem.
Supply Chain Shenanigans - Evil npm and Shady NuGet
Explore npm and NuGet supply chain vulnerabilities, uncovering potential threats and security risks in package management ecosystems for software developers and cybersecurity professionals.
Structured Scorecard Results: Tailor Your Own Supply-Chain Security Policies
Learn to customize OpenSSF Scorecard for tailored supply-chain security assessments using Structured Results feature. Explore practical examples and use cases for automated policy-driven analysis.
End of Life and End of Support in Policy and Practice
Explore end-of-life and end-of-support concepts in software, understanding operational and supply chain risks, and examining policy frameworks for producers and operators.
Strengthening the Industrial Ecosystem: Free OT Cybersecurity Resources
Discover free OT cybersecurity resources to mitigate risks in industrial environments, addressing financial and expertise gaps for small/medium organizations.
Deep Dive into the OpenSSF Mobilization Plan
Explore the OpenSSF Mobilization Plan for securing open source supply chains through automated tools, best practices, education, and collaboration.
How's Your Supply Chain with Your Insecure OSS Ingestion?
Explore secure open source software ingestion and supply chain management strategies for enhanced cybersecurity in modern applications and infrastructure.
Securing Software Repositories - EMEA Friendly
Explore strategies for securing software repositories, focusing on best practices and tools to protect against vulnerabilities and ensure code integrity.
Supply Chain Security in the Enterprise
Explore open source solutions for enterprise software supply chain security, focusing on Sigstore and Archivista to enhance accountability and transparency in software development.
Beyond the Code - SBOM and Supply Chain Security
Explore supply chain security, focusing on Software Bill of Materials (SBOM) and its role in enhancing software transparency and risk management in modern development practices.
Managing Supply Chain Risk in a World of AI-Assisted Developers
Explore strategies for mitigating security risks associated with AI coding assistants, focusing on safe code integration and leveraging open-source tools to enhance software supply chain security.
Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem
Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development and usage.
Securing the Software Factory
Explore strategies for securing the software development lifecycle, from code to deployment, enhancing overall application security and resilience.
Supply Chain Security for Open Source Projects
Explore supply chain security strategies for open-source projects, enhancing protection against vulnerabilities and ensuring robust software development.
Securing Software Repositories - APAC Friendly
Explore strategies for securing software repositories, focusing on best practices and tools to protect against vulnerabilities and ensure code integrity.
Under the Radar: How We Found 0-Days in the Build Pipeline of OSS Packages
Explore critical vulnerabilities in OSS build pipelines, including 0-day discoveries in major projects. Learn about attack trees, mitigations, and 'Living Off the Pipeline' components for enhanced security.
Build Provenance: Lessons from Homebrew
Explore build provenance for Homebrew package manager, including achievements, challenges, and technical insights. Learn about its architecture and implications for similar ecosystems.
Invisible Infiltration of AI Supply Chains: Protective Measures from Adversarial Actors
Explore protective measures against adversarial actors infiltrating AI supply chains. Learn to secure data, models, and pipelines, implement security controls, and mitigate risks in AI systems.
Cyber Security Afloat - Securing Very Big Iron
Explore vulnerabilities in maritime cybersecurity, potential impacts on supply chains and safety, and current protective measures for ships and offshore units.