Trends in Open Source Security

" summary

Covers how Linux distributions coordinate with reporters, upstream projects and other distros to manage security across many packages, focusing on best practices for vulnerability tracking. Examines toolchain hardening features (e.g. mitigations that turn exploitability into crashes), opportunities for further hardening, approaches to reduce memory-safety bugs, and static, cross-package detection of API misuse within a distribution.

AI-written summary · about

" related talks

• 52mCollaborating to Improve Open Source Security: How the Ecosystem Is Stepping UpMark Russinovich · RSA Conference 2020 DevSecOps & Application Security
• 35mOpen source security: Opportunity or oxymoron?Huzaifa Sidhpurwala · DevConf.CZ 2023
• 43mTime to Spell Out Open Source Software SecurityBrittany O’Shea · RSA Conference 2020 DevSecOps & Application Security
• 39mOpen source security: who’s responsible?Lothar Schulz, Anna Debenham, Tracy Miranda, Per Ploug, Rimas Silkaitis · GitHub Satellite 2019
• 41mBack to Security Basics: Evaluating, Consuming, and Contributing Open Source...Katherine Druckman · SupplyChainSecurityCon @ Open Source Summit Europe 2024
• 38mApplication Security in the age of Open SourceRon De Jong · Devoxx Belgium 2017
• 43mThe Importance of Developer Tooling to Make Open Source More Secure by DefaultBrian Behlendorf · SupplyChainSecurityCon @ OSS NA 2023
• 40mSecure Your Code from Open Source VulnerabilitiesMegha Dixit · RSA Conference 2020 DevSecOps & Application Security