Keynote: Security, Critical Infrastructure, and Community: How the Three Shall Meet
summary
Ericsson describes concrete security work for telco infrastructure after the 2024 Salt Typhoon attacks, noting those breaches didn’t stem from open source yet drove heavy investment in upstream fixes. Contributions touch 106 to 115 CNCF projects in 2024, include 73 direct CVE fixes, about 919 dependency bumps and roughly 3,800 PRs to harden stacks; priorities are zero trust, encrypted interfaces, secure defaults, encrypted storage and container signing, and expansion of the Linux/security hiring effort.
AI-written summary · about
related talks
09mKeynote: Welcome + Opening Remarks
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
17mKeynote: Fighting The Next War - Future Threats to OSS and Software Supply Chain...
15mKeynote: Government's Continuing Path Contributing Towards a Secure Open Source Ecosystem
04mKeynote: A Secure Supply Chain Vision
16mKeynote: There Is Just One Way to Do Open Source Security: Together
01h 09mKeynote: What Do We Owe One Another In Cybersecurity?
18mKeynote