Open Source Summit North America 2023

The modern world of software development is evolving at a breakneck pace, with new technologies, frameworks, and libraries constantly emerging. At the same time, supply chain attacks are becoming increasingly sophisticated and frequent. In this session, we will explore why vulnerability-focused traditional application security is not enough to protect your software from the threat of supply chain attacks and why we need to adopt an attacker-centric proactive approach. We will provide practical guidance for security professionals and developers to improve the security of their software supply chain. We will explore the challenges and opportunities of software supply chain security and provide best practices for identifying and mitigating risks. We will also introduce open-source tools and technologies to help secure your software supply chain, ensuring that your systems and data are protected against potential supply chain attacks. By the end of this session, you will have a better understanding of why vulnerability-focused traditional application security is not enough to protect your software from the threat of supply chain attacks. You will be equipped with the knowledge better to safeguard your software from these complex and evolving threats.