tune Filter sessions
9:00am • Keynote: Welcome + Announcements - Robin Bender Ginn, Executive Director, OpenJS Foundation & Aeva Black, Open Source Hacker and Consent Advocate
9:15am • Keynote: The Consequence of Success: OSS is Critical Infrastructure - Eric Brewer, Vice President of Infrastructure, Google
9:30am • Keynote: Linus Torvalds, Creator of Linux & Git, in conversation with Dirk Hohndel, Chief Open Source Officer, Cardano Foundation
10:05am • Keynote: Interesting Times in Secure Open Source - Todd Moore, Vice President - Open Technology and Developer Advocacy, CTO DEG, IBM
10:20am • Keynote: Leadership, Pre-Pandemic and Now - Amy Gilliland, President, General Dynamics Information Technology (GDIT) in conversation with Robin Bender Ginn, Executive Director, OpenJS Foundation
11:10am • Panel Discussion: How the Business Community is Working to Make the Open Source Software Supply Chain More Secure by Default - Jory Burson, Linux Foundation; Rao Lakkakula, JP Morgan Chase; Andrew Aitken, WiPro; Jeffrey Borek, IBM
12:00pm • Assessing the Risk of Open-source Components Using OpenSSF's Scorecard - Laurent Simon, Google & Naveen Srinivasan, Endor Labs
2:05pm • SBOM Ingestion and Analysis at New York-Presbyterian Hospital - Katie Bratman & Adam Kojak, NewYork-Presbyterian Hospital
2:55pm • Maslow's Hierarchy of Supply Chain Needs - Josh Bressers, Anchore
4:05pm • Authenticating Supply-chain Metadata: Building Remote Code Attestations on GitHub - Asra Ali & Laurent Simon, Google
4:55pm • What Makes A Build Reproducible? - Rose Judge & Joshua Lock, VMware
11:10am • Introduction to Presto: The SQL Engine for Data Platform Teams - Rohan Pednekar, Ahana Cloud, Inc. & Philip Bell, Meta
12:00pm • Ag-Rec: Modernizing A Century-old, Agriculture Recommendations Platform Through the Agstack Open-source Consortium - Gaurav Ramakrishna & Brandy S. Byrd, IBM
2:05pm • An Open Source Exploration of a Semantic Structure for Climate Accounting - Dr. Christiaan Johannes Pauw, Nova Institute & Marcus Alex-Ivan Howard
2:55pm • Panel Discussion: Aruba’s Decentralized Solution for Covid Drives Air Travel Transformation - Heather Dahl, Indicio; Yuri Feliciano, Government of Aruba & Adrien Sanglier, SITA Lab
4:05pm • Build a More Sustainable World Through "Call for Code with the Linux Foundation" Open Source Projects - Daniel Krook & Charles Johnson, IBM
4:55pm • Building a Standards-based Open Ecosystem for DPU/IPU Technologies - Kris Murphy, Red Hat; Dan Daly, Intel & Paul Pindell, F5 Networking
11:10am • OSPOCon Keynote: F5’s Open Source Journey - Christine Abernathy, F5, Inc.
11:30am • OSPOCon Keynote: OSPO News by TODO Group - Ana Jimenez Santamaria & Chris Aniszczyk, TODO Group
12:00pm • Panel Discussion: A How-to Guide for Contributing to Open Source as an Employee - Alyssa P Wright, Bloomberg; Duane O’Brien, Indeed; Josep Prat, Aiven; Deb Nicholson, Python Software Foundation; Richard Littauer, Open Source Collective
2:05pm • Does Your OSPO Help or Hinder Contributions? - Dawn Foster, VMware
2:55pm • The Challenge to Build a Distributed OSPO - Norio Kobota, Sony Group Corporation
4:05pm • GitHub's Data Story: Open Source at the Home for Open Source - Natalie D'Adamio & Ashley Wolf, GitHub, Inc.
9:00am • Keynote: Kevin Jakel, Founder + Chief Executive Officer, Unified Patents; Hilary Carter, Vice President of Research and Michael Dolan, Senior Vice President & General Manager of Projects, The Linux Foundation
9:45am • Keynote: Jennings Aske, Senior Vice President & Chief Information Security Officer, NewYork-Presbyterian Hospital
10:05am • Keynote: The Future of Open Source is Trust - Arun Gupta, Vice President & General Manager, Open Ecosystem Initiatives, Intel Corporation
10:10am • Keynote: A Love Letter to Open Source: A Look at The Past Ten Years - Melissa Smolensky, Vice President, Corporate Marketing, GitLab
11:00am • Krepair: Automatically Repairing .config Files to Cover Patches - Paul Gazzillo & Necip Yildiran, University of Central Florida
11:50am • Lightning Fast Java Application Startup Using Checkpoint/Restore with Eclipse OpenJ9 - Thomas Watson, IBM
1:45pm • Postmortem Analysis with Kexec/kdump and Ftrace - Steven Rostedt, Google
2:35pm • Kubernetes Network Policy Enforcement in XDP without IP Translation - Hong Chang, Futurewei Technologies, Inc & Xiaoning Ding, ByteDance (Tiktok)
3:45pm • Lessons Learned Creating A Robust, Hardened, Kernel Driver for A Hardware Device - Fiona Trahe & Adam Guerin, Intel Corp.
4:35pm • Keylime: Bootstrap and Maintain Trust on the Edge, Cloud, and IoT - Lily Sturmann & Michael Peters, Red Hat
11:00am • Dear Security, Compliance, and Auditors, We’re Sorry. Love, DevOps. - Bill Bensing, Red Hat
11:50am • Going Beyond Metadata: Why We Need to Think of Adopting Static Analysis in Dependency Tools - Joseph Hejderup, TU Delft | Endor Labs
1:45pm • Kubernetes Risk Assessment: Time to Go One Level Deeper - Ariel Shuper, Cisco
2:35pm • Managing Application Level SBOMs with Ortelius - Tracy Ragan, DeployHub
3:45pm • Purl and Vers: The Mostly Universal Package URL and Version Ranges Identifiers for Dependencies and Vulnerabilities - Philippe Ombredanne, AboutCode and NexB & Hritik Vijay, Independent
4:35pm • Google SLSA & NIST SSDF: Emerging Software Supply Chain Security Best Practices - Tony Loehr, Cycode
11:00am • Keeping Your Open Source Community Accessible to All - Treva Williams, Open Infrastructure Foundation
11:50am • Remote Doesn’t Mean Distant - Managing Teams Effectively from Different Geographies - David Bevan, Collabora
1:45pm • Personnel Chaos Engineering and Building a Resilient Organizational Structure - Jennifer D Bergstrom, Parsons
2:35pm • Turning Users Into Advocates, at Scale - Karin Wolok, StarTree
3:45pm • Panel Discussion: Marketing is Essential (and Not Sleazy) for Open Source Projects - Emily Omier, Emily Omier Consulting, LLC; Jana Iris, PlanetScale; Matt Yonkovit, Percona; Nithya Ruff, Amazon
4:35pm • Developer Experience: How to Conquer the Hearts of Developers - Elena Lape, Holographic Inc.
11:00am • All About That BoM, ‘bout That BoM - Melba Lopez, IBM
1:45pm • Panel Discussion: Enabling Linux in Safety Applications - Jeffrey Osier-Mixon & Gabriele Paoloni, Red Hat; Kate Stewart, The Linux Foundation; Elana Copperman, Mobileye; Philipp Ahmann, Robert Bosch GmbH; Paul Albertella & Milan Lakhani, Codethink
2:35pm • Using FOSS as Part of a System Safety Mechanism - Paul Albertella, Codethink
3:45pm • Xen in Safety-Critical Systems - Stefano Stabellini, AMD & Bertrand Marquis, Arm
4:35pm • Protect Your Application, Not the Network. Add Zero Trust Superpowers to Your Critical Applications and Systems - Clint Dovholuk, NetFoundry
11:10am • Welcome & Opening Remarks - Brandon Lum, Google
11:20am • Organization before Electronics before Concrete - Anne Bertucio, Senior Program Manager, Google
11:35am • Security Overview - Frederick Kautz, Security Enterprise Architect
12:00pm • Open Source Runs the World, Why Not Vulnerability Identifiers? - Josh Bressers, Anchore & Josh Buker, Cloud Security Alliance
2:05pm • Securing Open Source Software - End-to-End, at Massive Scale, Together - Christopher R Robinson, Intel & Anne Bertucio, Google
2:55pm • Vulntology - A Methodology to Characterize Vulnerabilities While Providing A Granular and Intuitive Structure - Christopher Turner, National institute of Standards and Technology
4:05pm • A Vulnerability Database Should Not Be About Vulnerabilities! - Hritik Vijay, Independent & Tushar Goel, AboutCode.org and nexB Inc.
4:55pm • Future of CVE - Art Manion, Carnegie Mellon University Software Engineering Institute
5:45pm • GSVS BoF: See Session Description for Details
11:10am • Unikraft: Making Unikernels Mainstream - Felipe Huici, Unikraft UG
12:00pm • Tracing on Page Table - YuHsiang Tseng & ChinEn Lin, National Taiwan Ocean University
2:05pm • Lower Response Time of Fork by Extending Copy-on-write to the Page Table - Chih-En Lin, National Taiwan Ocean University
2:55pm • Memory Folios - Matthew Wilcox, Oracle
4:05pm • Rust for Linux: Status Update - Miguel Ojeda, Rust Maintainer & Wedson Almeida Filho, Google
4:55pm • The Linux Performance Counter API, Made Easy - Jackson Garrett Huff, Independent
5:45pm • Panel Discussion: Community Response to Non-Practicing Entity Patent Risk in OSS - Keith Bergelt, Open Invention Network; Sarah Novotny, Microsoft; Kevin Jakel, Unified Patents
11:10am • Managing Containerized Software on Edge Computers with Open Horizon - Glen Darling, IBM
12:00pm • Debugging at Scale in Production - Deep into Your Containers with Kubectl Debug, KoolKits and Continuous Observability - Shai Almog, Lightrun
2:05pm • From Laptop to Cloud: Developing Cloud Native Applications with Containerized Databases - Nicolas Vermande, Ondat
2:55pm • Velero - The Cloud Native Backup for Kubernetes - Orlin Vasilev, VMware & Scott Seago, Red Hat
4:05pm • API Testing Without Writing Test Cases and Mocks - Neha Gupta & Shubham Jain, Keploy Inc
4:55pm • Network Traffic Quality of Service (QoS) Classes for Containers & Pods Via EBPF/XDP - Vinay Kulkarni & Phu Tran, Futurewei Technologies
5:45pm • Lightning Talk: Intro to Lens and Lens Extensions - Avinash Reddy Desireddy, Mirantis inc
5:55pm • Lightning Talk: Automatically Restrict Permissions for the GITHUB Token - Varun Sharma, StepSecurity
6:05pm • Lightning Talk: A GNN Based Framework for Kubernetes Security Agents: Threat and Vulnerability Detectors, Recommenders and Attack Simulators - Zeyno Dodd, Mindboard, Inc
11:10am • OSFCI - Extensible Open-source CI for Firmware with Real Hardware Execution - Arun Darlie Koshy & Jean-Marie Verdun, Hewlett Packard Enterprise (HPE)
12:00pm • Porting Linux to a Baseboard Management Controller Asic, Feedbacks and Perspectives - Jean-Marie Verdun & Luis Luciani, HPE
2:05pm • BOF: SBOMs for Embedded Systems: What's Working, What's Not? - Kate Stewart, Linux Foundation
2:55pm • Edge Computing with RISC-V Platforms Running XIP Linux - Vitaly Vul & Maria Vul, Konsulko AB
4:05pm • Towards PREEMPT_RT for the Full Task Isolation - Jim Huang, BiiLabs Co., Ltd. & Oscar Shiang, National Cheng Kung University
4:55pm • From UART to PCIe and DMA: Selecting Connectivity for Your FPGA-based Subsystem - Alexander Wirthmueller, MPSI Technologies GmbH
5:45pm • RISC-V BoF - Stephano Cetola, RISC-V International
11:10am • SSDFS: Flash-friendly File System with Highly Minimized GC Activity, Diff-on-write, and Deduplication - Viacheslav Dubeyko, ByteDance
12:00pm • System Device Tree and Lopper: Concrete Examples - Bruce Ashfield & Stefano Stabellini, AMD
2:05pm • V4L2 M2M as the Driver Framework for Video Processing IP - Karthik Poduval, Amazon Lab126
2:55pm • Static Partitioning with Xen, LinuxRT, and Zephyr: A Concrete End-to-end Example - Stefano Stabellini, AMD
4:05pm • Evolving ROS for Safety Critical Systems - Tully Foote, Open Robotics
4:55pm • RTLA: Real-time Linux Analysis Toolset - Daniel Bristot De Oliveira, Red Hat
5:45pm • Insight of an Audio Driver Based on ALSA - Chandrasekar Ramakrishnan, Samsung
11:10am • Panel Discussion: Lessons Learned: OSPOs in Universities - Clare Dillon, Innersource Commons; Sayeed Choudhury, Johns Hopkins University; Stephen Jacobs, Rochester Institute of Technology; Stephanie Lieggi, UC Santa Cruz; John Whelan, Trinity College Dubl
12:00pm • A Walk through the OSPO Five-stage Model and Personas - Ana Jimenez Santamaria, TODO Group
2:05pm • Lessons Learned After 1 Year Running an OSPO in Bancolombia (LATAM) - Daniel Estiven Rico Posada, Bancolombia
2:55pm • You're Doing it Wrong: OSPO Disasters - Van Lindberg, OSPOCO
4:05pm • Supply Chain Security, SBOMs and How OSPOs Can Play An Important Role Going Forward - An Ecosystem and Compliance Update - Jeffrey Borek, IBM
4:55pm • OSPOCon Awards
11:10am • Searching for the Right Words: Bringing NLP to Apache solr through ONNX and OpenNLP - Jeff Zemerick, Opensource Connections
12:00pm • The Unlimited Potential of Neural Search to Unlock the New Way of Data Comprehension - Bing HE, Jina AI
2:05pm • Integrating High Performance Feature Stores with KServe Model Serving - Ted Chang & Chin Huang, IBM
2:55pm • Labeling Tools are Great, but What About Quality Checks? - Marcus Edel & Jakub Piotr Cłapa, Collabora Ltd.
4:05pm • Flagging *and* Fixing Bias in ML - Bhaktipriya Radharapu, Google
4:55pm • Lightning Talk: A Component Registry for Kubeflow Pipelines - Christian Kadner, IBM
5:05pm • Lightning Talk: Demystifying Challenges/Learnings in Converting an Old-school Textile Inspection Machine into a Smart System Using AI/ML - Neethu Elizabeth Simon & Scott Thomas, Intel Corporation
5:15pm • Lightning Talk: Intellectual Cognitive Development in Artificial Intelligence - Ritwik Sharma, LinkedIn
5:25pm • Lightning Talk: Introducing Kubeflow Metal: Your Machine Learning Platform on Baremetal Kubernetes - Keith Mattix II, Microsoft & Charles Adetiloye, MavenCode
5:45pm • BoF: An Open Future for Conversational AI -- Why is it Important, and How Do We Get There? - Jon Stine & Oita Coleman, Open Voice Network
11:10am • Scalable Management of Vulnerabilities in Open Source - Oliver Chang, Google & Kate Catlin, GitHub
12:00pm • VEX Overview - Allan Friedman PhD, Senior Advisor and Strategist, Cybersecurity and Infrastructure Security Agency
2:00pm • Sponsored Session: Rising Threat: Securing Your Open-Source Pipeline - Hassam Mian, Anaconda
2:50pm • Effective Usage Analysis: Boosting Developer Productivity Via Innovative, Noise-reduced Vulnerability Analysis - Aharon Abadi, Ph.D, Mend
4:00pm • Informing Cloud Native Vulnerability Management: Some Views from the Past - Rory McCune, Cloud Native Security Advocate, Aqua Security
4:15pm • GSVS Closing Remarks - Emily Fox, Apple
9:00am • Keynote: Building a Galaxy on Open Source - Rachel Rose, R&D Supervisor, Industrial Light & Magic (ILM)
9:25am • Keynote: Data Lakehouses: Promise of Data Warehouse Delivered on Data Lakes and Open Source is the Foundation - Vini Jaiswal, Developer Advocate, Delta Lakes
9:35am • The 10,000 Steps of Open Source Project Health - Dmitry Vinnik, Open Source Developer Advocate, Meta
9:45am • Keynote: Alena Analeigh, Founder, Brown STEM Girl
10:00am • Keynote: Bringing Open Together with K.I.N.D.ness - Orion Jean, TIME 2021 Kid of the Year, Author and Kindness Activist
