The Linux Foundation Member Summit 2021

As all industries strive to reduce costs and increase innovation the adoption of open source continues to grow. The need for applications to implement well defined security, risk mitigation and governance procedures when using any third-party software are a key requirement for success. Open source software often requires more diligence given the nature of the projects and potential lack of consistent governance across the developer ecosystem. We will discuss the potential challenges open source can bring to security and a model to mitigate the most common issues. During this talk we'll discuss security and a model for managing vulnerabilities, including: · Clearly defined Software Bill of Materials (SBOMs) · Implementing scanning and vulnerability checks into your project proactively · Compliance considerations · Defining collaboration and ownership to mitigate security risk · Tools that can help you succeed Join us for this discussion on how to manage projects to address common security vulnerability that will help in increasing your adoption of open source to the satisfaction of your security group.