Critical Software Summit @ Open Source Summit Europe 2022
2022-09-15..2022-09-16
-- online --
[Critical Software Summit @ Open Source Summit Europe 2022, Critical Software Summit @ Open Source Summit Europe 2024]
[Critical Software Summit @ Open Source Summit North America 2022, Critical Software Summit @ Open Source Summit North America 2023, Critical Software Summit @ Open Source Summit Japan 2023, Safety-Critical Software Summit @ Embedded Open Source Summit 2024, Safety-Critical Software Summit @ Embedded Open Source Summit 2023, Critical Software Summit @ Open Source Summit Japan 2022]
who it's for
safety-critical software developers, linux kernel developers, automotive software engineers, security engineers, release and update engineers, embedded systems engineers, open source maintainers
topics
adversarial CI/CD pipelines; automated vulnerability checks; policy as versioned code; Renovate and Dependabot automation; NixOS and Yocto fragments; A/B OTA update frameworks; SBOM and CSAF vulnerability triage; STPA-driven system testing; BuildStream deterministic builds; LAVA deployment and test harnesses; kernel address space isolation; MMU coloring and pointer authentication
| title | author | length |
|---|---|---|
| Move Fast Build Things… Safely! | Mohammed Aboullaite | 34m |
Compares ten concrete F1 safety practices to software operations and lists actionable equivalents: automated vulnerability checks and adversarial CI/CD… | ||
| Policy As [Versioned] Code | Chris Nesbitt-Smith | 34m |
Claims a practical pattern: store policies in Git, use semantic version tags (examples 1.00, 2.00, 2-1-1), attach release notes and signatures, ship tests and… | ||
| The Need to Drive Towards Frequent and Sustained Software Updates | Mark Asselstine | 40m |
Claims that cars need 10–15 years support and that European vehicles average 11.8 years on the road drive the argument: kernel CVEs are frequent, many… | ||
| Understanding the Impact of Critical Vulnerabilities in Critical Infrastructure: A De... | Iain Deason | 33m |
Detailed account of techniques and outcomes: nine-month coordination for a flaw hitting 27 RTOSes, an emergency directive after Log4j active exploitation, use… | ||
| Bad Behaviour: Automating System-level Safety Testing Using Open Source Tools | Paul Albertella | 25m |
Claims that an open source toolchain reproducibly automates system-level safety tests: it uses subplot for scenario-driven tests derived from STPA, buildstream… | ||
| The Unexpected Demise of Open Source Libraries | Liran Tal | 46m |
Stories of real breakage and fixes: a tiny utility left-pad (11 lines, 2.5M downloads) gets unpublished and breaks thousands of builds; a maintainer publishes… | ||
| Address Space Isolation for Enhanced Safety of the Linux Kernel | Igor Stoppa | 43m |
Proposes an opt-in kernel patch that partitions kernel address space into three kernel contexts (safe, core, QM) by renaming linker sections, carving vmlalloc… | ||
| Enabling Linux in Safety-Critical Applications | Philipp Ahmann, Elana Copperman | 42m |
ELISA defines reusable elements, processes and tools so companies can argue safety for Linux-based systems: a reference system prototype (manual Xen + RT… | ||
| nothing matches | ||