Welcome & Opening Remarks
Organiserat Global Security Vulnerability Summit @ Open Source Summit North America 2022 · on Thursday, 2022-06-23· at 11:10· Brazos (Level 2), JW Marriott Austin, 110 E 2nd Street Austin, TX 78701·
summary
Opening remarks set summit goals: coordinate working groups and BoFs to turn proposals into action, not just talk. Notes that vulnerabilities evolve from Rowhammer to Spectre/Meltdown to Log4Shell, and cloud native scale makes inventory and incident response harder. Argues SBOM are static while vulnerabilities are dynamic, so combine SBOM + CVE + VEX statements to prioritize — e.g., libcurl TFTP flaw only affects specific feature — and use short-lived workload identities (e.g. spiffe/spire with reissue every 30–60 minutes) to automate enforcement.
AI-written summary · about
chapters (9)
- 0:00Start
- 2:50Cloud Native Infrastructure
- 11:09Cincinnati Ohio
- 25:01The Economic Forces Matter
- 26:25Where Did Your Regex Library Come from
- 28:13Modeling Gap
- 30:59Recap
- 31:35What Is Zero Trust
- 34:17How Do We Do this at Scale
related talks
01h 04mOpen Discussion - International Challenges with CVD, CNA, and CVE
07mWelcome and Opening Remarks [Day1]
22mOn the Shoulders of Giants: Security in FOSS
39mCloud Native Security Landscape: Myths, Dragons, and Real Talk
01h 16mCybersecurity with CDF & OpenSSF Focus Group
05mOpening and Introductions
48mConclusions and Key Takeaways from Day 1
44mNavigating Open Source and Open Standards for Better Cybersecurity