Time to Spell Out Open Source Software Security
summary
Explains what constitutes open source software beyond public repositories and why vulnerabilities occur in OSS without blaming individual developers. Covers strategies for tracking frequent changes and new vulnerabilities to maintain secure OSS-based development, with a focus on practices that enable innovation and stronger code.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 2:09chowder analogy
- 3:30Who crafts it
- 5:50Open Source Innovation
- 8:46GitHub
- 10:14How important is Open Source
- 11:27Open Source Risks
- 13:48Open Source Research
- 15:21Whats Blocking Us
- 15:48Tracking Vulnerabilities
- 17:58Risk Prioritization
- 19:09Layers of Vulnerability
- 20:02Speed of Dev Ops
- 22:55Open Source Testing
- 26:14Open Source Applications
- 26:57No Elixir
- 27:14Delivery Tools
- 28:52Application Security
- 35:55Combination of Testing
- 38:29Automated Testing
- 40:39Vulnerabilities
- 41:15Research
related talks
38mApplication Security in the age of Open Source
35mOpen source security: Opportunity or oxymoron?
32mWhy You Should Care About Open Source Supply Chain Security
40mSecurity: Why It _has_to Be Open Source
17mA New Era for Open Source Security
10mLightning Talk: Secure Consumption of Open Source Software: Evaluating, Util...
16mKeynote: Back to Security Basics: Evaluating, Consuming, and Contributing Open Source Software
58mThe Open Source Paradox: Unpacking Risk, Equity, and Acceptance