Google SLSA & NIST SSDF: Emerging Software Supply Chain Security Best Practices

categories icon Webinar

The severity and frequency of software supply chain attacks have increased significantly. How should software teams react to these new threats? Several new frameworks are emerging. At the behest of an executive order from the Whitehouse, The National Institute of Standards and Technology (NIST) created the NIST Secure Software Development Framework (SSDF) with robust guidance on what should be secured in the software supply chain. Similarly, Google has also released the Supply chain Levels for Software Artifact (SLSA) framework for ensuring software supply chain and build integrity.

While there is some overlap, NIST tends to focus on the “what” and Google SLSA focuses on the “how.” Combined, these two frameworks make an excellent roadmap on securing software supply chains. Yet, this combined roadmap is still not without security gaps.

This webinar will compare and contrast NIST SSDF and Google SLSA:

  • Introduction & the rise of software supply chain attacks
  • Google SLSA
  • Comparing SSDF & SLSA
  • Covering gaps
  • Demo
  • Q&A

Presented by:

Ronen Slavin
Ronen Slavin
Co-Founder & CTO
Tony Loehr
Tony Loehr
Developer Advocate


To access the resource please complete the form

By submitting this form I agree to be contacted by Cycode, and receive occasional offers & product updates via phone or email in line with Cycode's Privacy Policy.