Fireside Chat
summary
Argues that product security must merge with cyber operations to stop software supply chain attacks like SolarWinds and Log4j, cites IBM’s concrete moves: 5000 contributors across IBM and Red Hat, targeted partnerships with 20 HBCUs (six announced) and veteran outreach for 250,000 potential hires, and paying contributors with monetary recognition. Calls for automating secure development practices and rapid scale of developer education to address 750,000 open cyber jobs this year.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:33Security in 2022
- 6:20Government interest in OSSF
- 7:46Difference between 2009 and 2022
- 10:03Open Source is more than critical
- 10:32Cyber security education
- 14:17Governing board
- 19:21Other industries
- 22:43Final thoughts
related talks
41mKeynote: Fireside Chat with U.S. National Cyber Director Chris Inglis
11mCybersecurity for an Inclusive Future
50mRunning in the Shadow: Perspectives on Securing the Software Supply Chain
37mThe SolarWinds Hack and the Executive Order on Cybersecurity happened
07mCreating A Secure Software Supply Chain In A Large Engineering Organization
39mSoftware Supply Chain Security
29mSupply Chain Security: Threats, Defenses And What You Can Do
44mFireside chat