How to Secure Your End-to-end Supply Chain
summary
Open source supply chain risk grows sharply: reported attacks on OSS rise 650% increase in 2021, 80–90% of modern apps include OSS, and about 15,000 packages daily land on GitHub. Attackers move from dependencies to account takeovers and build system compromises, with 64% of organizations hit in the last year. The talk drills into concrete defenses for personal accounts, repository integrity, and CI/CD/build pipelines and outlines specific controls and telemetry to detect tampering.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:05Agenda
- 1:48State of Supply Chain Security
- 2:25Open Source
- 3:24Productivity
- 4:12Supply Chain Attacks
- 5:37Supply Chain Security
related talks
41mManaging the Risk of Software Supply Chain Attacks
11mSupply Chain Cybersecurity
40mPractical guides for enhacing your Software Supply Chain Security
51mOSS Supply Chain Threats and Why You Need a Holistic Security Strategy
39mOpen Source Software Supply Chain Security — Why does it matter?
37mSupply Chain Attacks and the Future of Software Delivery
35mSupply Chain Attacks: The New Reality
29mSecuring the Unseen: Defending Against Open Source Software Supply Chain Attacks