Key Steps the US Government Is Taking to Improve Citizens Everyday...
summary
US government agencies roll out concrete steps: publishing s-bom tooling and working groups, releasing VEX minimum requirements and running a VEX working group, and pushing software identity and SSDF-aligned CI/CD standards for secure pipelines. Defense adopts Platform One/iron bank patterns, counts 50–60 software factories, and cites a 768% jump in supply‑chain attacks. Tooling focus includes container/Kubernetes hardening, attestations, and using AI to find and remediate pipeline and code vulnerabilities.
AI-written summary · about
chapters (5)
- 0:00Start
- 11:10Introductions. AM)
- 11:20Learn from Justin Murphy of CISA on how software has grown to be an essential public resource and the importance of increase supply chain transparency.)
- 11:30Learn from Rob Vietmeyer, Chief Software Officer for DCIO Information Enterprise, on the importance of defending software national infrastructure and key steps the United States is taking.. AM)
- 11:40We'll then open this up to questions for the keynotes.. AM)
related talks
50mGame over or game changing? Why software development may never be the same again
25mYour Software Supply Chain is Only as Secure as its Weakest Link
44mImproving the Software Supply Chain Security
48mTranslating National Security Excellence into Private Sector Vigilance
45mBuilding Secure Software: Practical Strategies for Developers
48m5 Steps to VEX Success: Managing the End-to-End Workflow
34mFrom development to release: Protecting the software supply chain
50mRunning in the Shadow: Perspectives on Securing the Software Supply Chain