Warning: count(): Parameter must be an array or an object that implements Countable in /home/beyond/domains/devoxx.pl/public_html/wp-content/plugins/cfp-dev-shortcodes/shortcode/shortcode-cfp-speaker-details.php on line 113

Warning: Invalid argument supplied for foreach() in /home/beyond/domains/devoxx.pl/public_html/wp-content/plugins/cfp-dev-shortcodes/shortcode/shortcode-cfp-speaker-details.php on line 145

Krakow, Poland, 31 May - 2 June 2023

Steve Poole
Sonatype
Developer Advocate, Security Champion, DevOps practitioner (whatever that means) Long time Java developer, leader and evangelist. I’ve been working on Java SDKs and JVMs since Java was less than 1. JavaOne Rockstar, JSR leader and representation, Committer on open source projects including ones at Apache, Eclipse and OpenJDK. A seasoned speaker and regular presenter at international conferences on technical and software engineering topics.

The cost of cybercrime is increasing at a staggering rate, poised to almost equal US GDP by 2027. Cybercrime syndicates are becoming more and more professional with really elaborate scams to get your data and money. One of the latest trends in the weaponisation of open-source and the poisoning of real repositories to infect real software.

In order to ensure a safer ecosystem and that our supply chain is protected, we can take advantage of the latest developments:

  • SBOM - for transparency for both our dependencies and dependents
  • Reproducible Builds - for having the mechanisms to double-check the builds we use
  • SigStore - the new development in terms of signing builds.

During the current presentation, we will give an update related to the state of the threats, especially with the latest development related to the war in Ukraine. In the second part, we will dive into the solutions provided by each of the mentioned points and how they fit into the picture of hardening the supply chain.

Based on real-world examples, focused on automation and alerts at scale.

Tools like Syft, Bomber, Grype and Sonatype BOM doctor will be used.

More

Ticket prices will go up in...

72
Days
:
 
09
Hours
:
 
29
Minutes
:
 
07
Seconds

You missed out!

Venue address

ICE Krakow, ul. Marii Konopnickiej 17

Phone

+48 691 793 877

Email

info@devoxx.pl

Social Media