Full episode and show notes

Vulnerability Management

Other Considerations for Applying Security into Critical Infrastructure Systems – Kate Stewart – PSW #769

Over the last few years, the trend to use Open Source has been migrating into safety-critical applications, such as automotive and medical, which introduces system-level analysis considerations. In a similar fashion, these components are now being considered for the evolution of critical infrastructure systems. In the US, security concerns have prompted some emerging best practices, such as increased transparency of components, via software bill of materials (SBOMs), but this is not the only aspect to keep in mind. Segment Resources: https://www.linux.com/featured/sboms-supporting-safety-critical-software/, https://elisa.tech/, https://www.zephyrproject.org/, https://spdx.dev/.

January 11, 2023

Full Segment Notes

Over the last few years, the trend to use Open Source has been migrating into safety-critical applications, such as automotive and medical, which introduces system-level analysis considerations. In a similar fashion, these components are now being considered for the evolution of critical infrastructure systems. In the US, security concerns have prompted some emerging best practices, such as increased transparency of components, via software bill of materials (SBOMs), but this is not the only aspect to keep in mind.

Segment Resources:

Guest

VP Dependable Embedded Systems at Linux Foundation

Kate Stewart is Vice President of Dependable Embedded Systems at the Linux Foundation. She works with the safety, security and license compliance communities to advance the adoption of best practices into embedded open source projects. Since joining The Linux Foundation, she has launched the ELISA, Real Time Linux and Zephyr RTOS Projects, as well as supporting other embedded projects. With more than 30 years of experience in the software industry, she has held a variety of roles in software development, architecture, and product management, primarily in the tooling and embedded ecosystem working with international teams. As such, Kate frequently speaks about open source, SBOMs, embedded systems and more, at industry conferences like RSA Conference, IoT World, Embedded World, Open Source Summit among others.

Hosts

Announcements

Thank you for listening to or watching our podcasts! We want to ensure that we are creating the most relevant and useful content for our audience across our network! It is crucial to us that we are delivering to you more of what you want to hear and learn about. Please take a few minutes to complete our listener survey so that we can craft our content based on your needs. Visit https://securityweekly.com/survey to submit your feedback.

Stay in the Know, No Smoke and Mirrors – Join Our Newsletter

Get expert insights and technical breakdowns straight to your inbox.