Supply Chain Cybersecurity
summary
Claim: open source dominates modern software supply chains with 98% include OSS and an average 70% OSS per codebase, and components per app rising from 84 in 2016 to 528 in 2020. Practical defenses discussed: add CI pipeline vulnerability scanners, enforce dependency evaluation and rapid updates, publish SBOMs and adopt best-practices badges. Most common exploit observed is typosquatting. SBOMs and automated checks deliver measurable transparency and reduce risk when integrated into build and release workflows; adoption is increasing but still incomplete.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:27Welcome
- 1:43Supply Chain Cybersecurity
- 3:06Open Source Software
- 3:50Open Source is Critical
- 4:20All Software is Under Attack
- 4:36Open Source or Proprietary Software
- 5:22Common Problem
- 6:14Type of Squatting
- 6:44How Software is Developed
- 7:57Take Steps
- 8:54Evaluate
- 9:04Software Build Materials
- 9:56Software Evaluation
related talks
07mHow to Secure Your End-to-end Supply Chain
40mPractical guides for enhacing your Software Supply Chain Security
09mSecuring the Software Supply Chain with Open Source
41mManaging the Risk of Software Supply Chain Attacks
39mOpen Source Software Supply Chain Security — Why does it matter?
51mOSS Supply Chain Threats and Why You Need a Holistic Security Strategy
29mSecuring the Unseen: Defending Against Open Source Software Supply Chain Attacks
52mSoftware Supply Chain Lifecycle Management