SOSS Fusion 2024

Attending this event?

SOSS Fusion 2024

October 22-23, 2024 | Atlanta, Georgia USA
View More Details & Registration

The Sched app allows you to build your schedule but is separate from your event registration. You must be registered for SOSS Fusion 2024 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Eastern Daylight Saving Time. To see the schedule in your preferred timezone, please select from the drop-down located at the bottom of the menu to the right.

9:00am EDT

Welcome & Opening Remarks - Jim Zemlin, Executive Director, The Linux Foundation Skelton

9:20am EDT

Decoding the AI Revolution; Implications for Security and Society: AI Security Matters - Bruce Schneier, Renowned Security Technologist and Best-Selling Author Skelton

10:10am EDT

Enshittification Was a Choice - Cory Doctorow, Science Fiction Author, Activist and Journalist Skelton

10:30am EDT

Government's Continuing Path Contributing Towards a Secure Open Source Ecosystem - Timothy Pepper, Senior Technical Advisor, Open Source Software Security, US Cybersecurity and Infrastructure Security Agency (C... Skelton

10:45am EDT

Break + Networking Hagood Reception Room

11:15am EDT

The Power Duo: How Maintainers and Contributors Enhance Open Source - Aishat Muibudeen, AsyncAPI Initiative Salon 1 Session To Be Announced - David Wheeler, The Linux Foundation Skelton Building Developer Confidence in Software Security with the DevRel Community - Katherine Druckman, Intel Corporation; Lori Lorusso, Percona; Tabatha DiDomenico, G-Research Salon 4

11:30am EDT

Continuous Assurance of Supply Chain Security Levels of Open Source Artifacts using SLSA 0.1 - Krithika Venugopal & Raj Krishnamurthy, ComplianceCow Salon 1

11:45am EDT

QEMU-Native Hooking Bridge for Binary Fuzzing - Subhojeet Mukherjee, Hitachi India Pvt. Ltd. Salon 1

12:00pm EDT

End-to-End Secure ML Development - Mihai Maruseac, Google Skelton An Inside and Outside Look at the Government’s Ongoing Journey with Open Source Tech - Austen Bryan, Defense Unicorns & Camdon Cady, US Air Force Salon 4 Innovate Fast, Operate Securely: AI-Powered Protection for Containerized Workloads - Rick Bosworth, SentinelOne Salon 1

12:30pm EDT

Lunch (Attendees on Own)

2:00pm EDT

Is Diversity the Top Ingredient in Your SBOM? - Rao Lakkakula & Tunji Taiwo, JPMorgan Chase Salon 1 Open & Secure: Novel Sandboxing Technique for Any Open Source Library - Gal Elbaz, Oligo Security Salon 4 Solving Air-Gap Problems the Cloud Native Way with Zarf - Austin Abro, Defense Unicorns Skelton

2:35pm EDT

5 Steps to VEX Success: Managing the End-to-End Workflow - Cortez Frazier Jr., FOSSA Skelton Open Source Software (OSS) Transparency for Acquisition - Carol Woody, SEI Salon 4

3:10pm EDT

Living with and Leveraging GCC - James Lowden & Bob Dubner, Symas Corporation Salon 1 Episode AI: The Phantom (Dependency) Menace - Darren Meyer, Endor Labs Skelton

3:40pm EDT

Break + Networking Hagood Reception Room

4:10pm EDT

The Future of Secure Open Source Software Starts in K-12 - Rao Lakkakula, JPMorgan Chase Salon 4 From Cosign to an Ecosystem: The Evolution of Sigstore - Cody Soyland, GitHub Skelton Exploiting Trust: The Dark Side of Git - Neil Naveen Salon 1

4:25pm EDT

5 Things OSS Can Do To Make Life Easier For The Public Sector - Eddie Zaneski, Defense Unicorns Salon 4

4:45pm EDT

How to Scale InnerSource Adoption in Regulated Industries - Joseph Zang, Fannie Mae Skelton The Current State of SBOMs for End Users - Eddie Zaneski, Defense Unicorns Salon 4 Credentials 201: Demystifying Identity Federation - Billy Lynch, Chainguard Salon 1

5:00pm EDT

Fortify Your Code: Secure Your Supply Chain with Scorecard - Aditya Soni, Forrester Skelton

5:20pm EDT

Securing Nationally Critical Air-Gapped Infrastructure: Open-Source Code Signing and Beyond - Dr. Kanchan Panta, Raytheon | An RTX Business Skelton Mastering Dependency Management in C/C++ with Vcpkg: Secure and Simplified OSS Integration - Pablo Rodriguez Avila, Microsoft Salon 4 Validating Validations - Who's Watching the Watcher? - Megan Wolf, Defense Unicorns Salon 1

9:00am EDT

Keynote Sessions: To Be Announced Skelton

9:50am EDT

Setting the Standard - Safely Operationalizing OSS Contributions - Brenton Stevens, Open Source Compliance Manager, Fannie Mae Skelton

10:05am EDT

Break + Networking Hagood Reception Room

10:35am EDT

Scorecard at Scale: Old and New Possibilities for Lifting Security on All Repositories - Jeff Mendoza, Kusari & Stephen Augustus, Cisco Systems, Inc. Skelton Assessing Open Source Software Projects in the Software Supply Chain - Scott Hissam, Carnegie Mellon Software Engineering Institute & Joshua "CoCo" Crisp, Unified Platform (USCYBERCOM) Salon 1

11:10am EDT

Ace of Base: Meeting the OpenSSF Security Baseline with Minder - Adolfo García Veytia, Stacklok Skelton ClearlyDefined: A Crowdsourced Database of Licensing Metadata - Nick Vidal, Open Source Initiative & Lynette Rayle, GitHub Salon 1 Navigating the Open Source Policy Labyrinth: Unraveling Global Policy Efforts for a Secure Future - Dan Lorenc, Chainguard Salon 4

11:45am EDT

Project Copacetic: Directly Patch Container Image Vulnerabilities - Ashna Mehrotra, Microsoft Salon 1 Evolution of Risk-Management in Software - Vincent Danen, Red Hat Salon 4

12:15pm EDT

Lunch (Attendees on Own)

1:45pm EDT

A Glimpse Into OSS Vulnerability Disclosure Practices - Jessy Ayala, UC Irvine Skelton Beyond the CVE: Operationalizing SBOMs for Risk-Based Component Analysis - Cortez Frazier Jr., FOSSA Salon 4

2:20pm EDT

Why Is My Software on Fire? - Laurent Goderre, Docker Salon 1 Policy as Code: Access Control Security Done Right - Raz Cohen, Permit.io Salon 4 Unpaid Maintainers: The Security Threat No One Is Talking About (yet) - Lauren Hanford, Tidelift Skelton

2:35pm EDT

How to Use CNCF’s Falco to Protect Yourself from the New SCARLETEEL Attack! - Parthi Srinivasan & Marat Salakhutdinov, Sysdig Salon 1

2:50pm EDT

Trojan Model Hubs: Hacking the ML Supply Chain & Defending Yourself from Threats - Sam Washko & William Armiros, Protect AI Salon 1 Easier, Faster, and Safer Open Source Consumption Governance - Brando Himes & Brian Greenwood, The Vanguard Group Skelton PEP 740 and PyPI: Bootstrapping Provenance for the Python Ecosystem - William Woodruff, Trail of Bits Salon 4

3:20pm EDT

Break + Networking Hagood Reception Room

3:55pm EDT

The Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack - Erez Yalon, Checkmarx Salon 1 Navigating the Quantum Readiness Journey: Hands-on Guidance for Starting Your Migration - Eric Mizell, Keyfactor Skelton Supply-Chain Security, Outside in: What Helping ~200 Projects Improve Their Security Looks Like - Pedro Nacht & Diogo Teles Sant'Anna, Google Salon 4

4:30pm EDT

Back to Security Basics: Evaluating, Consuming, and Contributing Open Source Software - Katherine Druckman, Intel Corporation Skelton Future-Proof Your Security Posture: Automating Security Patches and Managing Dependencies with Bots - Nilekh Chaudhari, Microsoft Salon 1 Role-Based Access Is so Yesterday: Revolutionizing Authorization with Open FGA - Kiah Imani, Auth0 by Okta Salon 4

4:45pm EDT

The Power of Confidential Computing: Exploring Open Source Projects - Sal Kimmich, Confidential Computing Consortium, Linux Foundation Skelton