Allan Friedman
where else to find them
linkedin:allanafriedman
what they talk about
all 5 in the filters
where they keep going back
- RSAC Conference3 editions2020–2022
- RSA Conference2 editions2020–2024
all 11 in the filters
on a stage with
all 16 in the filters
who talks about the same things
- Nisha Kumar11 talks
- Tracy Ragan26 talks
- Dan Lorenc21 talks
- Michael Lieberman36 talks
- Brandon Lum23 talks
- Cassie Crossley4 talks
| title | conference | date |
|---|---|---|
| SBOM and Security Transparency - How it all fits together | CODE BLUE 2024 | 2024-11-14 |
SBOMs become concrete: CISA runs a program, publishes a software identification ecosystem paper and pushes VEX machine-readable assertions and a vul enrichment… | ||
| All Good Things: End of Life and End of Support in Policy and Practice | RSA Conference 2024 | 2024-05-06 |
CISA frames end-of-life as security support — a predictable, effective response to new security risks — and proposes machine-readable data (OpenEoX under… | ||
| When to Send Flowers? End of Life and End of Support Across the Ecosystem | SupplyChainSecurityCon @ Open Source Summit North America 2024 | 2024-04-16 |
Argues for separate data from policy by publishing time-varying EOL/EOS metadata (who, what, when) as machine-readable JSON linked to SBOMs but managed via… | ||
| SBOMs, VEX, and Kubernetes | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Pick one of the SBOM formats (CycloneDX or SPDX) and generate SBOMs at build time as part of CI; treat signing and provenance as phase two work and add VEX… | ||
| VEXed by Vulnerabilities That Don't Affect Your Product? Try This! | 34th Annual FIRST Conference 2022 | 2022-06-26 |
A machine-readable way to state that a vulnerability does not affect a product is now defined as a VEX profile of the OASIS CSAF format. It links product… | ||
| Tooling up: Getting SBOMs to Scale | RSAC 2022 | 2022-06-06 |
Presenters:
Allan Friedman, Senior Advisor and Strategist, CISA
Kate Stewart, VP, Dependable Embedded Systems, Linux Foundation
SBOMs serve a variety of… | ||
| By Our Powers Combined: Critical Infrastructure Partners for Transparency | RSAC 2022 | 2022-06-06 |
Moderator:
Allan Friedman, Senior Advisor and Strategist, CISA
Panelists:
Cheri Caddy, Senior Advisor for Cybersecurity, U.S. Department of Energy
Cassie… | ||
| SBOM: The Rest Of the Story | Cloud Native Security Conference North America 2021 | 2021-10-12 |
Covers why SBOMs are a practical shared data layer not a silver bullet: SPDX and CycloneDX are the common formats, signing via sigstore helps provenance, and… | ||
| The State of SBOMs | SupplyChainSecurityCon North America 2021 | 2021-10-11 |
Cloud-native projects now produce SBOMs at build time and Kubernetes ships SBOMs in a recent release, using standards like CycloneDX and SPDX and tools such as… | ||
| Keynote: SBOM is Coming: Why You Should Care and How You Can Help | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
SBOM means a machine-readable dependency graph listing components and origins so teams can map CVEs, licenses, and maintenance risk to deployed artifacts… | ||
| Challenge Accepted: 3 Experts, 3 Big Ideas on Supply Chain Security | RSAC 2021 | 2021-05-17 |
Shows how to make device supply chains auditable end to end: adopt DeviceSecOps with SCA, SAST, DAST, manual pentest and Site Acceptance Tests for final units… | ||
| Taking Control of Cyber-Supply Chain Security | RSAC 2020 Asia Pacific & Japan | 2020-07-15 |
Demonstrates that a single IP stack (Interpeak’s IPNet) spreads the Urgent/11 flaws into VxWorks and Green Hills-based devices — from MRI machines to Airbus… | ||
| What’s in the Box? Software Bill of Materials for IoT | RSA Conference 2020: Mobile & IoT Security | 2020-02-24 |
Dr. Allan Friedman, Director of Cybersecurity, NTIA / US Department of Commerce
Devices are opaque—how do we trust them? In addition to security standards… | ||
| How Software Transparency Can Help Save the World | BSidesSF 2020 | 2020-02-23 |
Claim: a machine-readable SBOM lets organizations answer “Am I affected?” by mapping actual components and versions, hashes and relationships. Work focuses on… | ||
| Transparency in the Software Supply Chain: Making SBOM a Reality | Black Hat USA 2019 | 2019-08-03 |
NTIA convenes a multistakeholder initiative to make SBOMs routine, with four working groups producing drafts by Sept 5, 2019; two usable formats are SPDX and… | ||
| nothing matches | ||