Understanding OSS Risk Beyond Code Vulnerabilities

Explore the complexities of open-source software (OSS) risk management in this 40-minute conference talk by IBM experts Shripad Nadgowda and Caroline Lee. Delve into the OSS ecosystem, examining vulnerability management strategies and real-world challenges. Learn about export control compliance, innovative open-source solutions, and spatial loss concepts. Gain insights from a Docker Image Release Survey and discover the applications of 2nd Degree user analysis. Understand the importance of Project Gauge in assessing OSS risks beyond traditional code vulnerabilities, equipping yourself with comprehensive knowledge to navigate the evolving landscape of open-source security.

Intro
OSS Ecosystem
Vulnerability Management
Let's get real
Export Control Compliance
Open-source Solutions
Spatial Loss
Docker Image Release Survey
nd Degree use
rd Degree Application
Project Gauge