SOSS Community Day Europe 2024

Attending this event?

SOSS Community Day Europe 2024

19 September 2024
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for SOSS Community Day Europe 2024 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Central Europe Summer Time (CEST). To see the schedule in your preferred timezone, please select from the drop-down located at the bottom of the menu to the right.

The schedule is subject to change.

08:00 CEST

Registration + Badge Pick-up Entrance 1 (Level 0)

09:00 CEST

Welcome & Opening Remarks - Katherine Druckman, Open Source Security Evangelist, Intel Corporation Room 3.29-3.30

09:10 CEST

Application Security is a Community Effort - Fernando Diaz, Senior Developer Advocate, Security, GitLab Room 3.29-3.30

09:20 CEST

Will eBPF Save Us From the Next Global Outage? - Liz Rice, Chief Open Source Officer, Isovalent @ Cisco Room 3.29-3.30

09:40 CEST

CISA Update - Aeva Black, Section Chief, Open Source Security, CISA Room 3.29-3.30

09:50 CEST

Hitchhikers' Guide to the Vulniverse - C Rob, Security Lorax, Intel Room 3.29-3.30

10:15 CEST

Security Initiatives in Community Driven Projects: Looking Ahead with Python and Rust - Deb Nicholson, Python Software Foundation & Rebecca Rumbul, Rust Foundation Room 3.29-3.30 We Know Security but How Do We Secure GenAI End-to-End? - Mihai Maruseac, Google Room 3.16-3.17

10:40 CEST

Finally! Automated End-to-End VEX Streams You Can Trust - Adolfo García Veytia, Stacklok Room 3.29-3.30 Nation-State Threats in the Open-Source Software Supply Chain - Ross Bryant, Phylum Room 3.16-3.17

11:00 CEST

Break & Networking Foyer

11:20 CEST

Enforcing Organization Policies with Enterprise Contract - Zoran Regvart, Red Hat Room 3.16-3.17 German National Guideline on SOSS-Lifecycle: Community Outreach - Damian Ludwig & Andreas Neth, BSI Room 3.29-3.30

11:45 CEST

Exploring a Risk Approach to Software Supply Chain Security - Abdullah Garcia, J.P. Morgan Room 3.29-3.30 Play, Learn, Secure: The Power of Gamification in Security Training - Julia Lamenza, Consultant Room 3.16-3.17

12:10 CEST

Breaking Barriers: The Art of (Free) Gamified Security Training - Joseph Katsioloudes, GitHub Room 3.16-3.17 OSS Dependency Health: Towards Maturity and Sustainability Risk Assessment Model - Georg Link & Miguel Ángel Fernández Sánchez, Bitergia; Ana Jiménez Santamaría, Linux Foundation; Wietse Braam, ING BANK Room 3.29-3.30

12:35 CEST

Rules of Engagement for Forking a Dependency - Chris Swan, Atsign Room 3.16-3.17 The Current State of Open Source Security Compliance Tooling Is … Well, Sad. - Philippe Ombredanne, AboutCode Room 3.29-3.30

12:45 CEST

Lunch (Attendees on Own)

14:15 CEST

ML Model Signing: Cryptographically Paving the Way to Provenance in Machine Learning Models - Mihai Maruseac, Google Room 3.29-3.30 Prioritisation of SCA Findings in Software Dependencies Using Static Reachability Analysis - Joseph Hejderup, Endor Labs Room 3.16-3.17

14:40 CEST

Managing Vulnerabilities in Open-Source Dependencies - Eva Sarafianou, Mattermost Room 3.16-3.17 Securing Content Distribution with RSTUF, an Incubating OpenSSF Project - Kairo De Araujo, TestifySec & Martin Vrachev, Open Source Contributor Room 3.29-3.30

15:05 CEST

Secure Coding Guide for Python - David Mather & Bart Karas, Ericsson Room 3.16-3.17 Web Developer Security: Best Practices & Beyond - Daniel Appelquist, Samsung Room 3.29-3.30

15:20 CEST

Exploring Some Essential Security Checks for Any Open Source Go Project - Cosmin Cojocar, Google Room 3.16-3.17 Userspace CNI - Developing in the Open with Remaining Secure - Michael O'Reilly, Intel Room 3.29-3.30

15:40 CEST

Break & Networking Foyer

16:00 CEST

Let Devs Be Devs Without Sacrificing Security - Andrew McNamara, Red Hat Room 3.29-3.30 TTX Session - Daniel Appelquist, Samsung; Kairo De Araujo, TestifySec; Georg Kunz, Ericsson; & Moderated by Katherine Druckman, Intel Corporation Room 3.16-3.17

16:25 CEST

Security Lessons Learned from Scanning Thousands of Repos - Aviram Shmueli, Jit Room 3.29-3.30

16:50 CEST

Navigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools - Mike Agrenius Kushner, Keyfactor Room 3.29-3.30

17:05 CEST

Run GenAI Projects at Scale Securely: From the Operating System to the MLOps Platform - Michelle Tabirao, Canonical Room 3.29-3.30

17:30 CEST

Closing Remarks - Katherine Druckman, Open Source Security Evangelist Room 3.29-3.30