OpenSSF Courses

Trojan Model Hubs: Hacking the ML Supply Chain and Defending Against Model Serialization Attacks

Discover essential strategies for protecting ML systems from supply chain attacks, focusing on model scanning and cryptographic signing to defend against Model Serialization Attacks in public model hubs.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Navigating the Quantum Readiness Journey: Hands-on Guidance for Starting Your Migration

Explore quantum computing's impact on cybersecurity and learn practical steps for implementing quantum-resistant cryptography, focusing on crypto agility, standardization efforts, and migration strategies.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Validating Kubernetes Webhook Controllers - A Framework for Testing and Monitoring

Discover how to validate Kubernetes webhook controllers using Lula, enabling systematic testing and monitoring of critical security functions in evolving cluster environments.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Scorecard at Scale: Old and New Possibilities for Lifting Security on All Repositories

Discover strategies for implementing OpenSSF Scorecard at scale, exploring various tools and methods to assess, monitor, and enhance repository security across large organizations.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

What Is Going On In Your Source Code? Understanding Software Component Analysis in Plain Language

Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, understanding their importance in protecting organizations from emerging security threats.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Navigating the Open Source Policy Labyrinth: Unraveling Global Policy Efforts for a Secure Future

Explore global policy initiatives shaping open-source software security, from US Executive Orders to EU regulations, while understanding how modern frameworks like SLSA and Software Self Attestation enhance digital infrastructure.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Enshittification Was a Choice - Understanding Internet Platform Consolidation

Explore how policy decisions led to internet platform monopolies and learn what changes are needed to build a better, more open digital future for everyone.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

QEMU-Native Hooking Bridge for Binary Fuzzing

Explore advanced binary fuzzing techniques through QEMU-Native Hooking Bridge, offering improved instruction hooking and memory control for efficient vulnerability detection in compiled code without source access.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

Why Is My Software on Fire? - Understanding Software Versioning and Supply Chain Security

Discover essential software versioning practices and supply chain management principles to enhance security and prevent hazards in open source development.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Scaling InnerSource Adoption in Regulated Industries - A Practical Guide

Discover practical strategies and insights for implementing InnerSource practices in regulated environments, focusing on regulatory compliance, cultural transformation, and infrastructure development.

• YouTube
• 12 minutes
• Self-Paced
• Free Video

Back to Security Basics: Evaluating, Consuming, and Contributing Open Source Software

Discover essential strategies for evaluating and securing open source software through maintenance assessment, vulnerability management, and community engagement practices for safer implementation.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

The Power of Confidential Computing - Exploring Open Source Projects

Explore how confidential computing revolutionizes data security through open-source projects, focusing on real-world applications from finance to human trafficking prevention and secure data processing.

• YouTube
• 12 minutes
• Self-Paced
• Free Video

Continuous Assurance of Supply Chain Security Levels of Open Source Artifacts Using SLSA 0.1

Discover how to verify SLSA provenance in trusted build systems to enhance supply chain security and protect against modified sources, compromised builds, and package tampering.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

5 Things Open Source Software Can Do to Make Life Easier for the Public Sector

Discover practical strategies for open-source maintainers to enhance public sector adoption, focusing on key improvements that facilitate government and public service implementation.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

Setting the Standard - Safely Operationalizing OSS Contributions

Discover effective strategies for managing open source contributions in regulated environments while maintaining security and compliance standards for fintech organizations.

• YouTube
• 13 minutes
• Self-Paced
• Free Video