TM
Tomas Mraz
— On the schedule —
The Security Response Process of the OpenSSL Library
The presentation should give you an overview of how we respond to the security issue reports. It will cover the security policy, the threat model and the severity levels. You will learn how we triage the issues, develop and integrate the fixes into the stable releases of the OpenSSL Library. We will discuss the recent challenges with the AI driven security issue reporting and some possibilities how we could change the process to accommodate to these challenges.
— Compositor's note —
Tomáš Mráz joined the OpenSSL team in 2021 as a Software Developer after being a long-time maintainer of the OpenSSL Library and other crypto packages in Red Hat Enterprise Linux. Tomáš, along with his other roles, leads the engineering team of OpenSSL Foundation that is primarily focused on software development of the OpenSSL Library from the non-commercial perspective.