corpus.blog
41554 blogs · 4,450,554 posts Claim your blog
Record · corpus.blog/posts/01a0ca89-71bf-732a-b7c9-0e9c28cba934

Updates on our continued collaboration with NIST to secure the Software Supply Chain

Google Security Blog · published 26 August 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at security.googleblog.com Wayback capture
1blogs citing
First cited
3 Mar 2022
Most recent
3 Mar 2022
Rank this month
not ranked
Links from this post
38
Words captured
1,036

Cited by

Blog
In the post
Date
Chainguard Blog
I Read NIST 800-218 So You Don’t Have To: Here’s What To Watch Out For Read at the source ↗
3 Mar 2022

Links from this post

Link
Host
https://blog.google/technology/safety-security/why-were-committing-10-billion-to-advance-cybersecurity/
blog.google
https://cloud.google.com/blog/products/identity-security/how-were-helping-reshape-software-supply-chain-ecosystem-securely
cloud.google.com
https://cloud.google.com/blog/products/identity-security/applying-zero-trust-to-user-access-and-production-services
cloud.google.com
https://www.whitehouse.gov/briefing-room/statements-releases/2021/08/25/fact-sheet-biden-administration-and-private-sector-leaders-announce-ambitious-initiatives-to-bolster-the-nations-cybersecurity/
whitehouse.gov
https://www.nist.gov/itl/executive-order-improving-nations-cybersecurity/workshop-and-call-position-papers
nist.gov
https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/
whitehouse.gov
https://www.ntia.gov/files/ntia/publications/sbom_minimum_elements_report.pdf
ntia.gov
https://www.nist.gov/system/files/documents/2021/07/09/Critical%20Software%20Use%20Security%20Measures%20Guidance.pdf
nist.gov
https://www.nist.gov/system/files/documents/2021/07/13/Developer%20Verification%20of%20Software.pdf
nist.gov
https://www.nist.gov/system/files/documents/noindex/2021/06/08/Google%20NIST%20statement%20on%20%282%29%20development.pdf
nist.gov
https://www.rpc.senate.gov/policy-papers/the-solarwinds-cyberattack
rpc.senate.gov
https://www.linuxfoundation.org/en/press-release/google-funds-linux-kernel-developers-to-focus-exclusively-on-security/
linuxfoundation.org
https://research.google/pubs/pub42934/
research.google
https://queue.acm.org/detail.cfm?id=3447806&doi=10.1145%2F3442632.3447806
queue.acm.org
https://www.nist.gov/system/files/documents/noindex/2021/06/08/Google%20NIST%20statement%20on%20%283%29%20security%20measures.pdf
nist.gov
https://cloud.google.com/blog/products/identity-security/delivering-the-industrys-most-trusted-cloud
cloud.google.com
https://cloud.google.com/blog/products/containers-kubernetes/how-gvisor-protects-google-cloud-services-from-cve-2020-14386
cloud.google.com
https://github.com/google/glome
github.com
https://sre.google/books/building-secure-reliable-systems/
sre.google
https://www.nist.gov/system/files/documents/noindex/2021/06/08/Google%20NIST%20statement%20on%20%284%29%20testing.pdf
nist.gov
https://opensource.googleblog.com/2019/02/open-sourcing-clusterfuzz.html
opensource.googleblog.com
https://github.com/ossf/scorecard
github.com
https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/
github.blog
https://osv.dev/
osv.dev
https://llvm.org/docs/LibFuzzer.html
llvm.org
https://google.github.io/oss-fuzz/getting-started/continuous-integration/
google.github.io
https://google.github.io/oss-fuzz/getting-started/integration-rewards/
google.github.io
Fuzzing internships for Open Source Software Read at the source ↗
security.googleblog.com
https://www.google.com/about/appsecurity/reward-program/index.html
google.com
https://www.google.com/about/appsecurity/patch-rewards/
google.com
https://www.nist.gov/system/files/documents/noindex/2021/06/08/Google%20NIST%20statement%20on%20%285%29%20integrity.pdf
nist.gov
http://slsa.dev/
slsa.dev
https://cloud.google.com/security/binary-authorization-for-borg
cloud.google.com
https://sre.google/books/
sre.google
Introducing SLSA, an End-to-End Framework for Supply Chain Integrity Read at the source ↗
security.googleblog.com
https://www.ntia.doc.gov/files/ntia/publications/google_-_2021.06.17.pdf
ntia.doc.gov
https://www.ntia.gov/federal-register-notice/2021/notice-rfc-software-bill-materials-elements-considerations
ntia.gov
https://blog.google/technology/safety-security/how-google-supports-todays-critical-cybersecurity-efforts/
blog.google