In this episode of “What’s In The SOSS,” Yesenia interviews David A. Wheeler, the Director of Open Source Supply Chain Security at the Linux Foundation. They discuss the importance of secure software development, particularly in the context of AI and machine learning. David shares insights from his extensive experience in the field, emphasizing the need for both education and tools to ensure security. The conversation also touches on common misconceptions about AI, the relevance of digital badges for developers, and the structure of a new course aimed at teaching secure AI practices. David highlights the evolving nature of software development and the necessity for continuous learning in this rapidly changing landscape. Chapters: 00:00 Introduction to Open Source and Security 02:31 The Journey to Secure AI and ML Development 08:28 Understanding AI's Impact on Software Development 12:14 Myths and Misconceptions about AI in Security 18:24 Connecting AI Security to Open Source and Closed Source 20:29 The Importance of Digital Badges for Developers 24:31 Course Structure and Learning Outcomes 28:18 Final Thoughts on AI and Software Security Episode links: David A. Wheeler’s LinkedIn page Secure AI/ML-Driven Software Development (LFEL1012) OpenSSF Education Get involved with the OpenSSF Subscribe to the OpenSSF newsletter Follow the OpenSSF on LinkedIn
