Unsolved Problems in Open Source Security
Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only! Grab it Explore the complex landscape of open source security in this 47-minute conference talk by Rhys Arkins from WhiteSource. Delve into unsolved problems, including dependency maturity levels, open source detection, and security notifications. Learn about the challenges of remediating vulnerabilities, distinguishing between vulnerable and malicious packages, and understanding identity concepts in open source. Examine the risks associated with malicious updates, the difficulties in reviewing open source updates, and the impact of decentralization on security. Discover proposed solutions such as better publishing protection, verifiable source code through reproducible builds, and the importance of sandboxing dependencies. Gain insights into the need for minimal version selection in package managers and the ongoing challenges facing the open source security landscape.