High-profile incidents like Log4Shell, the malicious backdoor in xz-utils, and dependency confusion attacks have exposed significant vulnerabilities in open-source software. This talk reviews these risks and outlines mitigation strategies—including best practices, tools, and services—to enhance security without creating excessive burdens for developers. We’ll also explore how the Eclipse Foundation supports projects through a professional security team, empowering tooling, and regulatory compliance assistance. This session provides practical insights for a diverse audience on safeguarding open source projects in today’s complex threat landscape.
Join this session to get answers to the following questions:
- What security challenges appear with open-source platforms
- What security risks come with open-source platforms
- How to harvest potentials and reduce security risks for SDV development
&nsbp;
