Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem

Explore the critical intersection of AI, cybersecurity, and open-source software (OSS) in this 21-minute conference talk by Harry Toor from the Open Source Security Foundation (OpenSSF). Delve into four key aspects of this ecosystem: the security risks faced by OSS underpinning AI systems, the importance of secure practices in open-sourcing AI components, AI's role in revolutionizing OSS security, and AI's evolving contribution to OSS development. Learn about tools like Scorecard and sigstore that help manage risks in the OSS supply chain. Gain insights into how these interconnected elements are shaping the future of technology and influencing both upstream creation and downstream use of open-source software.