**10 Properties of Secure Open-Source Software**

With over 98% of companies using open-source software when they develop their systems and applications, software supply chain security has become a crucial concern. Recent high-profile attacks such as the University of Minnesota researchers injecting malicious code into the Linux Kernel, the Log4Shell exploit affecting Log4j, and the PyPI phishing campaign (among others) underscore the growing risk to anyone who uses or develops software.

As a result, the US government has issued several executive orders and guidelines to improve software assurance and supply chain security. There are more mandates and guidelines to come. Which begs the question, how do we protect our software supply chain in a world where open-source software is developed by unknown contributors from all over the globe?

After all, can we really trust the software we use if we can’t trust the developers who wrote it?

The answer, of course, is no. And, our training session, “10 Properties of Secure Open-Source Software,” aims to address this question and provide practical guidance for securing your software supply chain. By attending this training, you will learn the properties that contribute to secure open-source software, how to detect bad actors, how to prevent the injection of malicious code, and how to measure the health and status of the package. While no solution is foolproof, adhering to these principles will give you a fighting chance against supply chain exploits, enabling you to (finally) trust your applications and systems and deploy them with confidence.

Speaker bio:

Michael Mehlberg | CEO, Dark Sky Technology

Michael Mehlberg is the CEO of Dark Sky Technology with over 20 years of experience in systems security, cryptography, and embedded software protection. He holds a Computer Science degree from Purdue University, co-authored a patent on AI-driven software security, and earned certifications in software project management, sales, and marketing. Michael leads advancements in software supply chain security and has worked on high-stakes national security projects, technical leadership in cryptographic security, and growing tech businesses into multi-million-dollar enterprises. He’s held executive roles in engineering, sales, and marketing, and served on the Board of Directors at Star Lab, where he played a key role in its acquisition and expansion into the defense sector. With deep expertise in reverse engineering, anti-tamper security, and system vulnerability analysis, he’s led research in automated software protection, AI for cybersecurity, and advanced threat detection. His insights have been featured in EE Times, Forbes, RTC Magazine, Authority Magazine, and Intelligent Aerospace, and he’s appeared on podcasts including Cybercrime Magazine, Intel’s Embracing Digital Transformation, and Via Satellite. Michael lives in the Washington D.C. area with his wife and three children, and enjoys reading, photography, martial arts, technology, and RV camping.