What is SLSA Framework? | Jasson Casey & Mike Starr | The DEVOPS Conference 2022

Описание: How can your product and customers become compromised through your product?

In this video Jasson Casey and Mike Starr will briefly talk through an emerging industry framework for analysing your development process. The first half of the session will cover what exactly is SLSA and how it can help you analyse the security of your development ecosystem. We'll also take a look at some examples of how to easily secure the initial access vector of the compromise.
-
Jasson has served as CTO of SecurityScorecard, VP of Engineering at IronNet Cybersecurity, Founder and Executive Director of Flowgrammable as well as Compiled Networks, VP of VoIP Product Development at CenturyTel, among other technical and executive roles. Jasson received a bachelor’s degree in computer engineering from The University of Texas at Austin and a PhD in computer engineering from Texas A&M University.

Mike is a cross-functional leader with experience building and launching products in new and disruptive markets. His latest venture, a cybersecurity startup focused on the convergence of high performance networking and advanced security controls, was acquired by a leading NGFW vendor, in July 2020. Prior to that, Mike held technical leadership roles managing initiatives spanning multiple technology solutions with a focus on building secure, resilient, and scalable networks and systems in both the public and private sectors.

Speakers:
Jasson Casey
CTO, Beyond Identity

Mike Starr
Director, Product Owner, Secure Edge, Fortinet

Speech:
What is the framework SLSA and how can it help DevOps protect against supply chain attacks?
-
👇 Learn more:
https://www.thedevopsconference.com
https://www.eficode.com/services/devo...
https://www.eficode.com
-
00:00 Intro
02:22 Supply chain attack
11:56 Why should you care?
13:14 Avenues of supply chain compromise
14:47 How can we better prepare?
18:46 What can you do?
28:48 Conclusion