Name
Software Supply Chain: It’s All About the Code
Track Name
Cyber Security - Security Is Job One
Session Type
Panel Session
Date & Time
Thursday, January 12, 2023, 2:00 PM - 2:45 PM
Description

Cybersecurity Track Attackers have discovered the path to compromising applications may not be through the front door, but attacking the apps' foundational components. Thus, the focus on securing the software supply chain. This panel will debate the best approaches to ensure that the components and libraries used in your applications haven’t been compromised. The current state of regulation will also be discussed, given the U.S. government’s executive order mandating the use of a software bills of materials (SBOMs).

The panel will dig into topics including:

  • Ways to secure applications while keeping DevOps teams happy
  • Understanding what kinds of testing can be automated and what can’t
  • Handling the increasing reporting requirements of additional regulation
  • Executive order, SBOM, decomposition, code signing, open source
Mike Rothman Jeff Williams David DeSanto Tanya Janca John Pescatore