OpenSSF Courses

C/C++ Compiler Options Best Practices

Explore best practices for C/C++ compiler options to enhance code security and performance. Learn optimization techniques and defensive programming strategies.

• YouTube
• 1 hour 12 minutes
• Self-Paced
• Free Video

C/C++ Compiler Options Best Practices

Explore best practices for C/C++ compiler options to enhance code security and performance. Learn optimization techniques and defensive programming strategies.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Free Video

The Open Source Paradox - Unpacking Risk, Equity, and Acceptance

Explore the complex dynamics between open source and proprietary software, examining risk tolerance, security biases, and evolving enterprise acceptance patterns in modern technology landscapes.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Easier, Faster, and Safer Open Source Consumption Governance

Discover practical strategies for automating and securing open source consumption while maintaining effective governance and legal compliance in enterprise environments.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

End-to-End Secure Machine Learning Development - Building a Secure AI Supply Chain

Discover essential security practices for AI development, from dataset handling to production deployment, focusing on supply chain security, model provenance, and risk mitigation in machine learning applications.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

The Simple Yet Lethal Anatomy of a Software Supply Chain Attack

Explore software supply chain vulnerabilities through an attacker's lens, examining open-source security flaws and defense strategies with practical demonstrations and countermeasures.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Secure Numerical Computing is Hard: Lessons from 10 Years of Open Data Science and the Long Road Ahead

Explore key security challenges and lessons learned from a decade of open data science, focusing on enterprise adoption of ML/AI technologies and emerging threats in numerical computing.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

The Current State of Software Bill of Materials (SBOMs) for End Users

Explore the challenges and opportunities of Software Bill of Materials (SBOMs), examining current implementation issues, regulatory requirements, and emerging solutions through OpenSSF projects like Protobom and bomctl.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Unpaid Maintainers: The Security Threat No One Is Talking About Yet - Understanding Open Source Security Risks

Explore the critical security risks posed by unpaid open source maintainers, examining the xz utils case and discovering practical solutions for supporting sustainable open source development.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

PEP 740 and PyPI - Bootstrapping Provenance for the Python Ecosystem

Explore how PEP 740 enhances PyPI's security through digital attestations, integrating with Sigstore and SLSA to provide robust package provenance without complex key management.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

The Simple Yet Lethal Anatomy of an AI Attack

Dive into the anatomy of AI security threats through live demonstrations, exploring attack strategies from reconnaissance to LLM poisoning, and learn to defend against emerging vulnerabilities in AI systems.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Phantom Dependencies in AI and ML Projects - Managing Hidden Software Dependencies

Discover how phantom dependencies impact AI/ML projects and learn effective strategies for identifying, managing, and securing these hidden software dependencies in your applications.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

From Cosign to an Ecosystem - The Evolution of Sigstore

Explore the evolution of Sigstore's software security ecosystem, from its core components to advanced integrations for package managers, CI workflows, and policy enforcement tools.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Novel Sandboxing Techniques for Open Source Libraries Using eBPF and KRSI

Discover how to implement advanced sandboxing techniques for open source libraries using eBPF and KRSI technologies to enhance security and protect against vulnerabilities and exploits.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Secure AI Orchestration: Mitigating Model-centric Attacks with Flyte

Discover how to protect AI systems from model-centric attacks, focusing on code injection and LLM vulnerabilities, while implementing security measures using Flyte orchestration and open-source tools.

• YouTube
• 27 minutes
• Self-Paced
• Free Video