Keynote: Government's Continuing Path Contributing Towards a Secure Open Source Ecosystem
summary
CISA outlines four concrete goals from the Open-Source Software Security Roadmap (2023): establish agency role, map prevalence of critical dependencies, reduce federal risk, and harden the wider ecosystem. Delivered specifics include push toward memory-safe languages, adoption of SBOMs, a downloadable tabletop exercise packet for supply-chain incidents, 107 public comments on OS initiatives, and a $1.7 million SVIP funding opportunity to build open-source tooling that must implement changes in downstream projects.
AI-written summary · about
chapters (6)
- 0:00Introduction and background
- 1:45SISA's mission and role
- 3:53Open source roadmap goals
- 5:41Hardening the ecosystem
- 7:24Call to action and resources
- 12:59AI security and future steps
related talks
27mDriving Policy To Secure the Open Source Ecosystem
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
22mKeynote: Securing the Open Source Ecosystem
04mKeynote: A Secure Supply Chain Vision
20m"Making Open Source Secure by Design"
11mKeynote: Securing Open Source
15mKeynote: Improving OSS Security Through Collaboration
44mNavigating Open Source and Open Standards for Better Cybersecurity