Dates
Conferences
Tags
Sort by:
Most recent
Conference: SupplyChainSecurityCon 2022
Authors: David Wheeler, Brian Behlendorf, Trey Herr, Amelie Koran
2022-06-22
tldr - powered by Generative AI
The panel discussion summarizes the OpenSSF summit held in May 2022, which aimed to develop a mobilization plan for securing the open source ecosystem. The discussion focuses on the attitudes and progress of open source software security in the federal government and the input of developers and maintainers to the OpenSSF summit and mobilization plan.
- The panelists introduce themselves and their backgrounds in technology and policy.
- The Cyber Statecraft Initiative at the Atlantic Council has been working on software supply chain issues since 2019 and is collaborating with OpenSSF to bring more policy attention to open source security.
- The OpenSSF mobilization plan includes ten work streams that prioritize different areas of open source security.
- The panelists discuss the importance of prioritization and government demand signals in the mobilization plan.
- The panelists also emphasize the need for more community engagement and volunteer contributions to the work streams.
- The panelists reflect on the historical context of open source security and the usefulness of an S-bomb in incident response.