Session
AI-Driven Security Solutions for Open Source Software
Open-source software (OSS) faces a significant security challenge, as maintainers struggle to implement effective security practices amidst existing responsibilities. AI-driven solutions can transform OSS security, enabling efficient scaling and revolutionizing the way open-source software is secured. First, we'll examine GitHub's advanced security features, including Dependabot alerts and the Advisory Database, GHAS (GitHub Advanced Security) and AI-powered CodeQL which provide a simple and efficient solution for security. Next, we'll discuss how Snyk, an open-source security platform that leverages "DeepCode AI Fix" technology to automate program repair with CodeReduce. This enables real-time security fixes and vulnerability management through Snyk integration. Finally, we'll delve into Google OSS-Fuzz, which utilizes AI-powered fuzzing for security vulnerability detection and also offers a rewards program. This talk will demonstrate how these AI-driven solutions enhance OSS security and provide hands-on experience with the tools, showcasing the way open-source software is secured.
Sarvesh Tiku
Georgia Tech CS Student | Technical AI Safety Fellow, Harvard
Links
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top