Maslow's Hierarchy of Supply Chain Needs
summary
Maslow-style hierarchy frames supply chain security with SBOM as foundation and concrete layers: Anchore tools SIFT and Grype produce SBOMs and scans, feeding a vulnerability database, scanner and management workflow. Real examples include 7,000+ scan results and 10,000-item reports that prove mostly false positives and a custom vulnerability management system that cuts triage from days to minutes. Sigstore reduces key management and Platform One runs a trusted registry; Tor uses reproducible builds against active adversaries; Log4j creates massive retrospective work. A Star Wars text pager called more wars is also implemented.
AI-written summary · about
chapters (11)
- 0:00Start
- 4:26What's the point?
- 5:23Who is this Maslow person anyway?
- 6:50Important sidenote
- 7:23There's an order to everything
- 8:39Overly unsimplified example
- 10:50Everyone's order is different
- 14:57Asking the right questions
- 18:26Platform One
- 22:06Log4Shell
- 27:29The REAL call to action
related talks
11mOSS Supply Chain Security
29mUnlocking the Power of SBOMs: A Deep Dive into Risk Management and Cybersecurity Posture
38mSecuring the chains: Building defensive layers for software supply chains
49mScaling Software Supply Chain Source Security in Large Enterprises
21mSecuring Diverse Supply Chains Across Interconnected Systems
41mSupply Chain Armoring: Tools and Techniques for Open Source Projects
23mSupply Chain Security using Free and Open Tools
30mSupply Chain Security for OpenSource Projects