pvnovarese / talks

Collection of slides, links etc from conference talks

talks

Collection of slides, links etc from conference talks.

Follow me:

• LinkedIn Profile
• Mastodon @[e-mail]

2024-04 The Legacy of Log4Shell: The Future of DevSecOps

• note: this is substantially different than the same-named talk from 2023-11 immediately below
• I think this link is broken? Slides
• Slides
• Video (soon?)

2023-11 The Legacy of Log4Shell: The Future of DevSecOps

• Slides
• Video (coming soon)

2023-09 The Lessons of Log4Shell: Preparing for the Next Zero Day

• Slides
• Video

2023-02-05 Panel: SBOM Content, Usefulness, and Caveats (FOSDEM)

• Video
• OpenSSF Recap

2022-11-14 Learn from Log4Shell: Using SBOMs for Zero-Day Preparedness (DevOpsDays Chattanooga)

• Slides
• Video

2021-09-29 Secure Your Supply Chain: Adding a Software Bill of Materials to Your Containers to Improve Vulnerability Scanning (Open Source Summit)

• Video
• Slides

2016-08-24 User Namespace and Seccomp Support in Docker Engine (ContainerCon)

• Video
• Slides

Interviews

• The Importance of a Software Bill of Materials (Red Hat OpenShift TV, 2021-06-29)
• Security Week: Continuous Security and Compliance with Anchore Enterprise (Red Hat X Podcast Series, 2021-04-28)

Other Appearances (Sponsored Talks, Webinars, &c)

• SSDF - Myth vs. Reality (anchore.com webinar, 2023-05-23)
• SBOMs on the Road: Thrilling Tales of Supply Chain Security (anchore.com webinar, 2023-03-28)
• Workshop: Using SBOMs to Secure Your Software Supply Chain (DevOps World Orlando, 2022-09-27, Cancelled due to Hurricane Ian)
• How GitLab and Anchore Work Together to Protect Containerized Workloads (GitLab Commit, 2021-08-03)
• Finding the Hidden Risks in Your Software Containers (devops.com webinar, 2021-07-08) Staying Out of the (Bad) Headlines: Keeping Attackers Out of your DevOps Toolchain (DevOps Enterprise Summit EU, 2021-05-18)