Critical Software Summit @ Open Source Summit Japan 2022
2022-12-05..2022-12-06
Yokohama, Japan
[Critical Software Summit @ Open Source Summit Japan 2022, Critical Software Summit @ Open Source Summit Japan 2023]
[Critical Software Summit @ Open Source Summit North America 2023, SupplyChainSecurityCon @ Open Source Summit Japan 2023, Critical Software Summit @ Open Source Summit Europe 2022, Critical Software Summit @ Open Source Summit North America 2022, Critical Software Summit @ Open Source Summit Europe 2024, SupplyChainSecurityCon @ Open Source Summit Europe 2023]
who it's for
edge platform engineers, embedded Linux engineers, security engineers, supply chain and SBOM engineers, site reliability engineers, open source maintainers, devops engineers
topics
Ansible infrastructure as code; podman and Kubernetes containers; OSTree safe OS updates; ACME certificate automation; CI/CD pipelines and service catalog; Ubuntu CVE Tracker lookups; commit-id based kernel range extraction; kernel coverage .config checks; tracepoint and eBPF tracing; deterministic finite automata modeling; SW360 SBOM manager and SPDX; Sigstore and local supply chain tooling
| title | author | length |
|---|---|---|
| What it Really Takes to be Successful at the Edge | Mariel Losso, Chad Ferman | 31m |
Claims that large-scale edge needs a full automation foundation are backed by concrete choices: Ansible for infrastructure-as-code, podman/kubernetes for… | ||
| Config Based CVE Matching for Linux Kernel | Takuma Kawai | 26m |
Current method of matching CVEs by package and major kernel version produces hundreds of false positives (benchmarks show >80% on a recent LTS). The pipeline… | ||
| Formal Verification of Embedded Linux Systems Using Trace-Base... | Benno Bielmeier, Wolfgang Mauerer | 38m |
Proposes a semi‑formal pipeline that models safety‑relevant behavior as deterministic finite automata, instruments Linux (using tracepoints, ftrace, kprobes… | ||
| How Cybertrust Japan is Trying to Tackle OSS Security and Make... | Munehiro Ikeda | 43m |
Cybertrust Japan announces an OSS Security Mobilization Plan and launches an OpenSSF Japan chapter, prioritizing streams 3 signature, 9 SBOMs and 10 supply… | ||
| Securing Open Source Through Threat Modeling | Aviv Sasson, Daniel Prizmant | 37m |
Claim: systematic threat modeling uncovers real, fixable flaws in open source — the team uses manual code review, fuzzing and automated scanning to find bugs… | ||
| SW360 SBOM: Managing Vulnerability Information, SPDX Documents and New Depen... | Kouki Hama, Tien Le | 36m |
SW360 is a live SBOM manager that already implements vulnerability registration via REST API and web UI, imports and exports SPDX 2.2 and 2.3 to create… | ||
| nothing matches | ||