Improving Open Source Software Security - David A. Wheeler

Open Source Software (OSS) runs the world, and that means attackers are attacking OSS.

This talk will focus on some of the efforts ongoing to improve the security of OSS, especially the Linux Foundation's Open Source Security Foundation (OpenSSF). That includes free courses on developing secure software, the OpenSSF Best Practices badge, and the Alpha-Omega project.

We'll also discuss what you can do to improve the security of the OSS you develop and reduce the risks when you select and use OSS.