Language Platforms and Software Supply Chain

QCon New York 2023

Track

Language Platforms and Software Supply Chain

Tuesday 13 June · 6 sessions, 50 minutes each

About the track

As computing evolved, targeting specific hardware and architectures became impractical, leading to the development of language platforms and runtimes such as Java’s JVM and Microsoft’s CLR. Today, we write code for various environments, including IoT devices, Kubernetes sidecars, service meshes and the kernel. As a result, modern language platforms need to be portable, lightweight, and secure. This session delves into the latest developments in language platforms, enabling developers to write code using a growing range of languages across an expanding array of platforms.

From a security perspective, the supply chain we use to build and deploy our software, has become just as important as the platform it runs on. We’ve recently witnessed numerous high-profile attacks targeting the supply chain, resulting in much greater attention on this challenge. This particular branch of security is interesting because there are many components in a typical software supply chain, which means security solutions and risk mitigations require a multifaceted approach. In this session we’ll dive into secure software supply chain architectures, learn about tools that can help mitigate common risks, and explore the current landscape of available solutions. 

Sessions in this track

Tuesday 13 June. 6 sessions per track, chosen and introduced by the Track Host.

10:35 Dumbo / Navy Yard Session WebAssembly Wasm: What is Universal Compute Good For? Sean Isom Senior Engineer @Adobe 11:50 Dumbo / Navy Yard Session Security Sigstore: Secure and Scalable Infrastructure for Signing and Verifying Software Billy Lynch, Zack Newman 13:40 Dumbo / Navy Yard Session WebAssembly Build Features Faster With WebAssembly Components Bailey Hayes Director @Cosmonic 14:55 Dumbo / Navy Yard Session jvm Virtual Threads for Lightweight Concurrency and Other JVM Enhancements Ron Pressler Technical Lead OpenJDK's Project Loom @Oracle 16:10 Dumbo / Navy Yard Session Software Supply Chain Security Achieving SLSA Certification with a “Bring-Your-Own-Builder” Framework Asra Ali Software Engineer @Google 17:25 Dumbo / Navy Yard Session Software Supply Chain Security Securing the Software Supply Chain: How in-toto and TUF Work Together to Combat Supply Chain Attacks Marina Moore PhD Candidate @NYU & Tech Lead for CNCF's TAG Security
76% senior dev or higher
1:11 speaker ratio
60+ practitioners

QCon New York 2023 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.

Share