Supply Chain from SLSA to OSC&R

on YouTube ↗51m

" summary

Overview of supply-chain security for software delivery, comparing the SLSA framework with other measures and gaps it leaves against certain attack types. Covers practical prevention approaches and limitations of SLSA, and discusses additional controls and practices to better detect or mitigate supply-chain attacks.

AI-written summary · about

" chapters (9)

1. 0:00Welcome
2. 2:11What is supply chain
3. 8:36Supply chain attacks
4. 11:48SLSA framework overview
5. 18:12SLSA limitations and vulnerabilities
6. 22:51OSC&R framework overview
7. 26:44Supply chain protection tools
8. 31:58Summary and recommendations
9. 33:43Q&A

" related talks

• 59mIntroduction to SLSAVeer Muchandi · Devnexus 2022
• 20mAnalyzing Google’s SLSA Framework for Securing Software Supply ChainsRonen Slavin · Global AppSec US 2021 Virtual
• 16mSecuring the Modern Software Supply Chain: A Beginner’s Guide To SLSA, SBOM, and BeyondYash Pimple, Yash Sharma · Cloud Native University 2025
• 14mSLSA - A supply chain security frameworkRoberto Hueso Gomez · DevConf.CZ 2023
• 43mSLSA, SigStore, SBOM & Software Supply Chain Security. What does it all mean?Abdel Sghiouar · Copenhagen Developers Festival 2023
• 40mPractical guides for enhacing your Software Supply Chain SecurityAbdel Sghiouar · KCD Barcelona 2024
• 34mFrom development to release: Protecting the software supply chainLuca Bandini · devsecopsday 2023
• 49mScaling Software Supply Chain Source Security in Large EnterprisesRao Lakkakula · RSA Conference 2023