SEAPATH: A LF Energy Project for Critical Infrastructure with Emphasis on Software Supply Chain Security

Explore a 36-minute conference talk on SEAPATH, an innovative LF Energy project revolutionizing electrical grid substations through virtualization. Discover how this open-source initiative enhances adaptability and interconnections in critical infrastructure while prioritizing reliability and cybersecurity. Learn about SEAPATH's impressive growth, including its 781% increase in contributors and achievement of the OpenSSF Silver Best Practices Badge. Delve into two approaches used in SEAPATH: a pre-build Linux distribution (Debian-based) and a custom Linux distribution (Yocto project-based) with long-term support. Examine the benefits and challenges of these solutions regarding community involvement, supply chain security, SBOM, and customization. Gain insights into SEAPATH's comprehensive system testing approach, which addresses both cybersecurity and functional aspects to ensure the project's stability and resilience for critical infrastructure applications.