Skip to Main Content
Talk Intermediate

Securing your software from (OSS) suply chain attacks

Proposal status is Rejected
Session Description

Attackers are increasingly using indirect methods to exploit software, compromising both direct and indirect open-source dependencies. This can lead to dangerous attacks and breaches in software security. This session delves into the fundamentals of supply chain attacks and how organizations can leverage open-source software to defend against supply chain attacks and zero-day exploits.


Topics Covered:

  • Understanding the Software Supply Chain
  • Supply Chain Attacks from Open Source Dependencies
  • Leveraging SBOMs (Software Bill of Materials)
  • Artifact Attestation and Verification
  • Complying with SLSA (Supply Chain Levels for Software Artifacts)
  • Applying policies on SBOM and SLSA provenance


References

https://openssf.org/event/slsa-security-for-builds/

Session Categories

FOSS

Speakers

Teja Kummarikuntla
Teja Kummarikuntla Developer Relations Engineer | Harness

Teja is a seasoned Developer Relations Engineer with extensive experience working with both open-source and proprietary software. His work involves evangelizing, educating, and enhancing products through developer advocacy. Currently, he is at Harness, where he focuses on building solutions that help organizations secure their software supply chain through various practices.