A Vulnerability Database Should Not Be About Vulnerabilities
Explore innovative approaches to vulnerability databases, focusing on package-centric models, data aggregation, and addressing common issues in cybersecurity information management.
SBOMs for Embedded Systems - What's Working, What's Not
Explore challenges and successes in implementing Software Bill of Materials (SBOMs) for embedded systems, discussing regulatory impacts, generation methods, and practical applications.
Scalable Management of Vulnerabilities in Open Source
Learn strategies for efficiently managing vulnerabilities in open source projects from experts at Google and GitHub, focusing on scalable approaches and best practices.
VEX Overview - Cybersecurity and Infrastructure Security Agency
Explore VEX with cybersecurity expert Allan Friedman, gaining insights into this crucial aspect of infrastructure security and its implications for modern digital systems.
All About That BOM - Understanding Software Bill of Materials
Explore software supply chain security with a focus on Software Bill of Materials (SBOM), its importance, and implementation strategies for enhanced transparency and risk management.
Securing Your Open Source Supply Chain
Explore strategies for securing the open source supply chain, focusing on best practices and tools to mitigate risks in software development and deployment.
Addressing Cybersecurity Challenges in Open Source Software
Insights on addressing cybersecurity challenges in open source software, including organizational priorities, improvement strategies, and policy drivers. Live panel discussion of key findings from Snyk and Linux Foundation research.
Software Supply Chain Threat Landscapes - A Moving Target
Explore evolving software supply chain threats and learn strategies to protect your organization from vulnerabilities, malicious attacks, and emerging risks in the digital ecosystem.
How Do You Know You're Done After a Security Fix - Leveraging SBOM Data
Explore approaches for leveraging SBOM data to improve automation and confidence in safety analysis after applying vulnerability fixes in systems with safety considerations.
The Supply Chain Conundrum: Why Traditional Application Security Is Failing Us
Explore why traditional app security falls short in protecting against supply chain attacks. Learn proactive, attacker-centric approaches and best practices to safeguard your software development process.
Find and Fix Software Security Problems - Preventing Security Mistakes
Explore effective strategies for identifying, fixing, and preventing software security issues. Learn how to prioritize and address vulnerabilities to enhance overall system security.
Improve Vulnerability Management with OCI Artifacts - It Is That Easy
Learn to enhance vulnerability management using OCI artifacts. Discover how to efficiently utilize SBOMs, signed attestations, and open-source tools for improved supply chain security at scale.
Putting Hackers Breaching Your Cluster in Automatic Quarantine
Explore automatic isolation techniques for breached apps in Kubernetes clusters, enhancing overall security and minimizing potential damage from hacker intrusions.
Keeping Up with CVEs: Finding Needles in Haystacks - Practical Vulnerability Assessment
Discover practical approaches to assess product security beyond raw vulnerability numbers, focusing on risk assessment and understanding scanner limitations in container image analysis.
SBOM: The Rest of the Story - Understanding Software Bill of Materials
Experts discuss Software Bill of Materials (SBOM), addressing misconceptions, sharing challenges, and exploring implementation strategies for enhanced software supply chain security.
Fighting the Next War - Future Threats to OSS and Software Supply Chain Security
Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.
OmniBOR: Bringing the Receipts for Supply Chain Security
Discover OmniBOR, a revolutionary approach to capture artifact dependency graphs in software development, enhancing supply chain security and reducing false positives in vulnerability scanning.
Securing Diverse Supply Chains Across Interconnected Systems
Explore how SpaceX integrates SBOM and vulnerability discovery tools to enhance security across diverse software systems, reducing response time and improving prioritization for developers.
Untrusted Execution - Attacking the Cloud Native Supply Chain
Explore cloud native supply chain vulnerabilities, threat modeling, and security controls. Learn about trusted execution environments and end-to-end security solutions for protecting complex systems.
How to Secure Your Supply Chain at Scale
Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.
Secure Your Software Supply Chain Using Observability
Explore techniques for enhancing software supply chain security through observability, focusing on key benefits and practical implementation strategies.