Critical Software Summit @ Open Source Summit North America 2023
2023-05-10..2023-05-12
Vancouver, Canada
[Critical Software Summit @ Open Source Summit North America 2022, Critical Software Summit @ Open Source Summit North America 2023]
[Critical Software Summit @ Open Source Summit Europe 2022, Critical Software Summit @ Open Source Summit Japan 2023, Safety-Critical Software Summit @ Embedded Open Source Summit 2024, Safety-Critical Software Summit @ Embedded Open Source Summit 2023, Critical Software Summit @ Open Source Summit Japan 2022, Critical Software Summit @ Open Source Summit Europe 2024]
who it's for
embedded software engineers, safety engineers, security engineers, software supply chain engineers, platform engineers, operations engineers, systems integrators
topics
SPDX SBOMs and build metadata; Linux Xen Zephyr composition; meta-elisa Yocto reproducible builds; DO-178C DAL D Linux; Xen safety certification ISO 26262; zero dynamic allocation model; parts catalog with file verification code; SEAPATH KVM PREEMPT_RT cluster; mainframe to Cassandra migration; automated PR remediation with CodeQL
| title | author | length |
|---|---|---|
| How Do You Know You're Done - After a Security Fix? | Kate Stewart, Peter Brink | 43m |
Claim: extending SBOMs across the lifecycle plus SPDX relationships and build metadata lets teams automate impact analysis and prove a security patch hasn’t… | ||
| Reproducible Multi Element System Composition with Linux, Xen & Zephyr | Philipp Ahmann | 43m |
Project shows a reproducible multi-OS demo composed from Linux, Xen and Zephyr using Yocto (meta-elisa), GitLab CI, Docker and OpenQA; nightly CI builds… | ||
| Safety-Certifying Open Source Software: The Case of the Xen Hypervisor | Stefano Stabellini, Senthil Kumar Rajagopal | 46m |
AMD aims to safety-certify upstream Xen for IEC 61508 SIL3 and ISO 26262 ASIL‑D by keeping work upstream, adding MISRA checks (about 45 rules adopted so far)… | ||
| A Development Environment for DO-178C Level D Certified Linux | Chuck Wolber | 57m |
Uses Yocto/OpenEmbedded and BitBake to produce reproducible, source-built embedded Linux images that meet DO-178C DAL D objectives and enter revenue service… | ||
| Software Part Catalog Management Is a Prerequisite for Successful SBOM Creation | Mark Gisi | 36m |
Claims an open source parts catalog plus data model and workflow makes SBOM generation with SPDX seamless; implemented on Postgres, Go backend, GraphQL API… | ||
| Seapath, the Configuration Project to Build a Platform/Cluster... | Aurelien Watare, Florent Carli | 39m |
SEAPATH is an LF_ENERGY open source configuration project that assembles existing pieces into an industrial VM cluster for substation real‑time controls, using… | ||
| Migrating Mission Critical Workloads from Mainframe to Open... | Seshu K Guddanti, Venkat Mopuri | 45m |
U.S. Bank moves 60% of read traffic off the mainframe into Cassandra by piping mainframe CRUD events through an API/Kafka stream into Spark which atomically… | ||
| Scaling the Security Researcher to Eliminate OSS Vulnerabilities Once and for... | Jonathan Leitschuh | 52m |
Claims that automated bulk pull request generation can actually fix widespread OSS flaws using real tooling and measurable results. Uses CodeQL variant… | ||
| nothing matches | ||