UXL Security strategy as an adoption of the best industry practices
Open-source runs the world. That’s why we at the Linux Foundation and UXL genuinely believe in establishing and transparently sharing the best ecosystem practices, staying at the forefront of modern collaborative software development. Recognizing the level of responsibility entrusted to us by millions of users who consume LF and UXL projects, we must make sure our repos are as resilient as possible to the next industry incident like XZ poisoning, regreSSHion attack, or a vulnerability in Log4j. Let’s talk about how the UXL Security strategy and application of the best-in-class industry practices and tools help us make the common good of open-source a safer and trusted space.
Speaker(s)
Roman Zhukov - Product Security Lead at Intel Corporation
Practicing cybersecurity leader, expert, and engineer (15+ years in the industry), (ISC)2 CC (Certified in Cybersecurity). Experienced in the Security Development Lifecycle (SDL) from Architecture to DevSecOps and Incident Response. Business Development – launched new products and services. Managed complex security projects. Advised customers on cybersecurity strategy. Managed Pentest and AppSec teams. Leads SW Security at Intel, helping teams grow in Security and managing Product Security programs; recognized as Intel Brown Belt in Security. Engaged in Open Source initiatives: Security Champion for UXL (Linux Foundation), member of OpenSSF working groups. Public speaker, security evangelist, trainer at universities and educational centers, mentor and consultant for startups.
