SOSS Fusion 2024

AI has transformed industries, economies, and societies and helped organizations reimagine what’s possible for their businesses. While AI presents countless opportunities for innovation and growth, we must still be cognizant of the challenges it poses to information security. In this keynote, Schneier unravels the intricate web of risks and opportunities that AI presents as he addresses issues related to its vulnerabilities, ethical considerations, and unpredictability while underscoring the skills anyone can tap into to build resilient systems that can withstand unforeseen challenges and effectively navigate the complexities of AI security.  

The internet's enshittification - its consolidation into gigantic platforms that trapped and then tormented end users and business customers alike - was a choice. Specific policies transformed the old, good internet into the enshitternet of "five giant websites filled with screenshots of the other four." We can build a new, good internet, but it's going to take more than good tech: it will require good *policies*.

Throughout history governments have often played an enabling role in technology innovation. And the innovation value brought by open source software (OSS) is well known. And too the friction caused to innovation by cyber-insecurity is well known. But the intersection of these three topics has been less clear, until recently.
This talk will explore the emerging intersection of open source software, cybersecurity, and government by sharing: the four goals in the Open-Source Software Security Roadmap published in 2023 by the US Cybersecurity and Infrastructure Security Agency (CISA),
1) establishing CISA’s role in supporting the security of OSS,
2) understanding the prevalence of key open source dependencies
3) reducing risks to the federal government
4) hardening the broader OSS ecosystem
 their alignment with the National Cybersecurity Strategy’s goal of a more resilient, equitable, and defensible cyberspace, ongoing progress across 2024 toward the four goals, and potential next opportunities for alignment and collaboration across industry, academia, open source, and government looking forward into 2025 and beyond.

This session provides a view into how OSPOs can balance good corporate citizenship while maintaining security in a highly regulated, low risk fintech organization. This involves strategies for effective partnering with DevSecOps stakeholders and the internal developer community.