Event

Software Supply Chain Summit: Bridging Theory and Practice

Date
May 21, 2024
Time
9 am CET
Event Type
In person
Location
Europe
Event Overview

The seminar will feature a diverse lineup of speakers from both academia and industry, followed by a panel discussion. This event is tailored for industry professionals, researchers, and students, to foster a rich exchange of ideas and insights.

Location:

TU Delft CS Building

Van Mourik Broekmanweg 6

2628 XE Delft

Agenda:

09:00 - 09:20: Speaker 1 - JavaScript Call Graphs

09:20 - 09:40: Speaker 2 - Security Analysis of Package Repositories

09:40 - 10:20 Speaker 3  - Henrik

10:20 - 10:40 Speaker 4  - TBD

10:40 - 12:00: Panel Discussion

------

PhD Defense

14:30: Layman talk

15:00: Public defense of Joseph Hejderup

16:30: Reception

Location:

Aula Congrescentrum

Mekelweg 5

2628 CC Delft

------

18:30 - 22:30 Defense Party

Location

Exhale - X TU Delft (Rooftop terrace)

Mekelweg 8

2628 CD Delft

In this seminar, we will explore cutting-edge trends, challenges, and research in the analysis, security, and management of software supply chains.

Want to stay in the loop?

Sign up for our newsletter.

Claude Fable 5: Mythos-grade hype, record cheating, and a few hall-of-fame entries
Average results with 59.8% on functional solves and just 19.0% on security solves
Read more
Recall, not reasoning: how AI coding agents cheat security benchmarks
Recall, not reasoning: how AI coding agents cheat security benchmarks
Read more
Endor Labs + Cursor: Building the security foundation for agentic coding
Endor Labs + Cursor: Building the security foundation for agentic coding
Read more
Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise
Cut container vulnerability noise by up to 90% with full-stack reachability analysis spanning application and container image OS layers.
Read more
Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
MCP servers inherit classical vulnerabilities like command injection, path traversal, and SSRF. Here's why LLMs and MCP deserve the same security practices as traditional applications.
Read more
How Fake Font Packages Abused npm as a CDN
101 packages disguised as font files distributed 34 TiB of data via npm's infrastructure—with a total of 4.3 PiB transferred via downloads.
Read more