Understanding OSS Risk Beyond Code Vulnerabilities

Explore the complexities of open-source software (OSS) risk management in this 40-minute conference talk by IBM experts Shripad Nadgowda and Caroline Lee. Delve into the OSS ecosystem, examining vulnerability management strategies and real-world challenges. Learn about export control compliance, innovative open-source solutions, and spatial loss concepts. Gain insights from a Docker Image Release Survey and discover the applications of 2nd Degree user analysis. Understand the importance of Project Gauge in assessing OSS risks beyond traditional code vulnerabilities, equipping yourself with comprehensive knowledge to navigate the evolving landscape of open-source security.