Keeping Methuselah Up To Date - How Open Source Software Plays Into Carrier's Extremely Long Support Lifetimes

Learn about the unique challenges of managing open source software security in industrial systems with extremely long support lifetimes in this keynote presentation by Ryan Ware, Deputy Chief Product Security Officer at Carrier Global. Discover how companies like Carrier consume open source software in their products and understand the direct impact that open source security has on product security profiles. Explore the specific difficulties of supporting open source software in industrial systems that require decades-long support cycles, unlike typical software products. Examine a hypothetical software stack example that illustrates the complex support and security challenges these long lifecycles create. Understand how OpenSSF projects including Security Baseline, Scorecard, and Minder contribute to improving open source software security across the entire ecosystem, creating benefits for all users and organizations that depend on open source components.