Keynote: “How to be a Responsible Consumer of Open Source Software”

No ratings

Presented at Blue Team Con 2024 by

Aeva Black

As global digital threats evolve, the interdependence between open source software communities and commercial software vendors, and the interplay between open source stakeholders and global governments, have become increasingly vital. Recent policy actions in both the US and EU have focused on this intersection, and the formation of government Open Source Program Offices (OSPOs) shows the indispensable role of open source software in national infrastructure and national security. Recognizing that many community-driven open source software projects are critical to the digital supply chain, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently taken several actions towards supporting the secure development, distribution, and utilization of open source software. Attendees of this talk will learn from CISA’s Section Chief for Open Source Security about recent policy changes in both the US and the EU, gain an understanding of common characteristics of open source communities that are resilient to threats, and learn how to apply a guideline — developed in partnership between several US agencies and private sector entities — for the responsible and sustainable usage of open source software in the enterprise.