We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

Looking at Open Source Security from the Community Angle

00:00

Formal Metadata

Title
Looking at Open Source Security from the Community Angle
Title of Series
Number of Parts
43
Author
License
CC Attribution 3.0 Unported:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
Language

Content Metadata

Subject Area
Genre
Abstract
The people behind OSPOs can bring strong potential and opportunities to strengthen the security of open source projects. The recent results from the new State of OSPO report find that 96% of organizations with an OSPO or similar open source initiatives use these entities to provide advice on security decisions and risk mitigation strategies. People working at OSPOs usually act as the linchpin and point of contact where maintainers of open source projects can reach out and better identify project health issues. Questions arise, such as: How is the working environment of the community that sustains the open source projects critical to my organization? Are maintainers having issues dealing with all the feature requests and problems? Do they need help with infrastructure, funding, etc.? This talk aims to shed light on different ways OSPOs and security teams can work together, not only from a project risk assessment perspective but also from a more human, relational network of people sustaining those projects.
AngleInformation securityLocal GroupInformation securityOpen sourceMusical ensembleSatelliteComputer animationLecture/ConferenceMeeting/Interview
AngleInformation securityLocal GroupData modelSoftware developerReference dataSoftwareScripting languageOpen sourceExplosionBitSoftware developerOpen sourceGroup actionDifferent (Kate Ryan album)Data managementAngle of attackAnalytic setProjective planePivot elementComputer animation
Programmable read-only memoryLocal GroupFormal grammarData modelSoftware developerSoftwareElectric currentExplosionOpen sourceScripting languageRootSoftware developerDebuggerWeb 2.0Angle of attackDifferent (Kate Ryan album)Front and back endsGroup actionWeb-DesignerLecture/ConferenceComputer animation
Open sourceGroup actionInformation securityOpen sourceSelf-organizationLecture/Conference
SoftwareChainInterface (computing)Continuous functionCodeInformation securityRun time (program lifecycle phase)Open sourceDistribution (mathematics)Point cloudAerodynamicsMIDITelecommunicationMathematical optimizationProgrammable read-only memoryVirtual machineDistanceGraphics processing unitInformationEuclidean vectorSoftware frameworkMetric systemSoftware frameworkProduct (business)Power (physics)Self-organizationTouch typingPoint cloudCodeDifferent (Kate Ryan album)SoftwarePoint (geometry)Endliche ModelltheorieOpen sourceChainUser interfaceConnectivity (graph theory)Computing platformElectric generatorField (computer science)Instance (computer science)Information securityComputer animationXML
TelecommunicationInformationWeb 2.0Library (computing)Open sourceWeb applicationLecture/Conference
Open sourceVirtual machineInformationTelecommunicationAerodynamicsControl flowPhysical systemContinuous functionProgrammable read-only memoryCAN busData modelData miningGraphics processing unitComputing platformPoint cloudScalabilityDistanceMathematical optimizationSoftware frameworkEuclidean vectorReinforcement learningSelf-organizationInformation securityData managementTask (computing)Staff (military)Integrated development environmentStack (abstract data type)Case moddingMereologyMedical imagingInformation securityRight angleProduct (business)Open sourceSelf-organizationSoftware maintenanceChainSoftwareSound effectStack (abstract data type)INTEGRALComputer animationXML
Self-organizationProjective planeSoftware maintenanceOpen sourceNormal (geometry)Integrated development environmentLecture/Conference
Open sourceSelf-organizationInformation securityStaff (military)Task (computing)Data managementIntegrated development environmentStack (abstract data type)Self-organizationExecution unitOpen sourceComputer animation
Open sourceSelf-organizationOpen sourceSelf-organizationCASE <Informatik>Shape (magazine)Projective planeTask (computing)Computer animation
Local GroupPersonal digital assistantCASE <Informatik>Open sourceSelf-organizationOpen sourceExecution unitInformation securityLine (geometry)Projective planeData managementoutputParallel portCollaborationismTerm (mathematics)1 (number)Self-organizationDifferent (Kate Ryan album)Group actionFeedbackSoftware developerXMLComputer animation
Tournament (medieval)ExplosionCASE <Informatik>Product (business)Interior (topology)Open sourceVideo gameVulnerability (computing)Self-organizationCycle (graph theory)Different (Kate Ryan album)Angle of attackMereologyLecture/Conference
Open sourceComputer architectureTerm (mathematics)Computer animationLecture/Conference
1 (number)Theory of relativitySelf-organizationOpen sourceLatent heatInformation securityTerm (mathematics)Spectrum (functional analysis)Computer animation
ChainSoftwareSoftware developerFeedbackProgrammschleifeInformation securityData managementTouch typingInformation securitySoftwareSoftware developerFeedbackChainLatent heatProduct (business)Self-organizationPoint (geometry)Computer animation
Information securityProcess (computing)Software developerAutomationLecture/Conference
Open sourceSoftware developerComponent-based software engineeringOpen sourceSelf-organizationConnectivity (graph theory)Process (computing)Dynamical systemInformation securityArmProduct (business)Online helpSoftware developerProjective planeAutomationLecture/ConferenceComputer animation
TrailOpen sourceAngle of attackInformation securityProjective planeSoftware maintenanceSoftware bugWordService (economics)Parallel portSelf-organizationTrailSoftware developerTask (computing)Instance (computer science)Computer animationLecture/Conference
Self-organizationSoftwareOpen sourceInformation securityOnline helpSoftware maintenanceLecture/Conference
Open sourceOpen setStaff (military)Information securityChainCollaborationismSoftwareContinuous functionDigitizingModul <Datentyp>Data managementTerm (mathematics)Observational studyArchaeological field surveyData modelCapability Maturity ModelFreewareCASE <Informatik>Meta elementTwin primeGEDCOMIntegral domainLocal GroupFood energyNumerical taxonomyStaff (military)CollaborationismChainSelf-organizationOpen sourceSoftware developerShared memory9K33 OsaInformation securityProcess (computing)Projective planeGroup actionBitDigitizingDifferent (Kate Ryan album)Online helpComa BerenicesMessage passingComputer animation
Numerical taxonomyWebsiteOpen sourceDifferent (Kate Ryan album)DialectWeb pageComputer programmingSoftware repositoryLecture/ConferenceComputer animationXML
WebsiteSelf-organizationControl flowOpen sourceOffice suiteComputer programmingBitLecture/Conference
WebsiteMereologyOpen sourceSoftware developerBitMultiplication signSelf-organizationNumberCASE <Informatik>Open setLecture/ConferenceMeeting/Interview
SpacetimeGroup actionData managementInstance (computer science)CASE <Informatik>Latent heatSelf-organizationOpen setInformation securityProjective planeVulnerability (computing)Lecture/Conference
Vulnerability (computing)Touch typingSelf-organizationCASE <Informatik>Point (geometry)Rule of inferenceLecture/ConferenceMeeting/Interview
WebsiteRule of inferenceSelf-organizationInformationWebsiteFlow separationLecture/Conference
WebsiteLecture/ConferenceMeeting/Interview
WebsiteArchaeological field surveyPulse (signal processing)9K33 OsaLecture/Conference
Traffic reportingArchaeological field surveyLecture/Conference
Information securityStaff (military)Open sourceChainCollaborationismInformation securityAngle of attackLecture/Conference
Key (cryptography)Presentation of a groupLevel (video gaming)SpacetimeLecture/Conference
SpacetimeRule of inferenceInformation securitySelf-organizationSoftware frameworkLecture/Conference
WebsiteOpen sourceIterationLecture/ConferenceMeeting/Interview
Self-organizationLecture/Conference
Programmable read-only memoryWebsiteMusical ensembleLecture/Conference
Transcript: English(auto-generated)