Securing Software Supply Chains

Today, software development teams are consuming billions of open source components and containerized applications to improve productivity at a massive scale by leveraging open source software supply chains.

The good news: they are accelerating time to market. The bad news: many of the components and containers they are using are fraught with defects including critical security vulnerabilities.

Join us in this session to:

• Explore recent high-profile software supply chain attacks, (e.g. Equifax, India's AADHAAR, CoPay Bitcoin Wallets) including the ease and scale at which they were executed.
• Discuss improvements required for software supply chain security and what combination of actions are being implemented and/or considered to protect, fortify, and defend critical operations, consumers, missions and core infrastructure.
• Share insights on current efforts spanning legislation and regulation, policy, acquisition, and technology aimed at improving software supply chain security.

Sponsored by Sonatype