Google SLSA & NIST SSDF: Emerging Software Supply Chain Security Best Practices
The severity and frequency of software supply chain attacks have increased significantly. How should software teams react to these new threats? Several new frameworks are emerging. At the behest of an executive order from the Whitehouse, The National Institute of Standards and Technology (NIST) created the NIST Secure Software Development Framework (SSDF) with robust guidance on what should be secured in the software supply chain. Similarly, Google has also released the Supply chain Levels for Software Artifact (SLSA) framework for ensuring software supply chain and build integrity.
While there is some overlap, NIST tends to focus on the “what” and Google SLSA focuses on the “how.” Combined, these two frameworks make an excellent roadmap on securing software supply chains. Yet, this combined roadmap is still not without security gaps.
This webinar will compare and contrast NIST SSDF and Google SLSA:
- Introduction & the rise of software supply chain attacks
- NIST SSDF
- Google SLSA
- Comparing SSDF & SLSA
- Covering gaps
- Demo
- Q&A
Presented by:
GET ACCESS
To access the resource please complete the form
