Featured Speakers

When people want to understand the vulnerabilities of our increasingly digital world, and how to protect their privacy within it, they turn to Bruce Schneier. Dubbed a “security guru” by The Economist, Schneier is an internationally renowned security technologist and best-selling author of over a dozen books – including his latest, Click Here to Kill Everybody, exploring the risks and implications of our new, hyper-connected era. He works at the intersection of security, technology, and people, and has penned hundreds of articles, essays, and academic papers on these topics.

Katherine Druckman is an Open Source Evangelist at Intel where she enjoys sharing her passion for a variety of open source topics. She is a long-time open source advocate, developer, and podcaster, and is currently the host of Open at Intel and a co-host of the FLOSS Weekly and Reality 2.0 podcasts. Previously, Katherine spent over a decade as Director of Digital Experience at Linux Journal. A passionate Drupalist since she first downloaded a tarball in 2005, she has also been a Drupal contributor and a Software Engineer.

Marten Mickos is the CEO of HackerOne, Inc. the leading vulnerability coordination and bug bounty platform. Previously Marten was the CEO of Eucalyptus Systems, acquired by Hewlett-Packard where he served as head of the cloud business. As the CEO of MySQL AB from 2001 to 2008, Marten grew that company from a garage start-up to the second largest open source company in the world. Marten holds a M.Sc. in technical physics from Helsinki University of Technology in his native Finland.

Cory Doctorow (craphound.com) is a science fiction author, activist and journalist. He is the author of many books, most recently THE BEZZLE (a followup to RED TEAM BLUES) and THE LOST CAUSE, a solarpunk science fiction novel of hope amidst the climate emergency. His most recent nonfiction book is THE INTERNET CON: HOW TO SEIZE THE MEANS OF COMPUTATION, a Big Tech disassembly manual. Other recent books include RED TEAM BLUES, a science fiction crime thriller; CHOKEPOINT CAPITALISM, nonfiction about monopoly and creative labor markets; the LITTLE BROTHER series for young adults; IN REAL LIFE, a graphic novel; and the picture book POESY THE MONSTER SLAYER. In 2020, he was inducted into the Canadian Science Fiction and Fantasy Hall of Fame.

Technology and organizational change management expert spanning public and private sector industries. Currently the Open Source Compliance Lead at Fannie Mae responsible for the development and implementation of an enterprise Open Source Standard.

Tim Pepper is an engineer with over 25 years in open source, with contributions to Kubernetes (emeritus Steering Committee elected member, emeritus Code of Conduct Committee elected member; past SIG Release co-chair and WG LTS co-organizer), open source security projects, Linux kernel/drivers/distributions, software update, Android, OpenStack, etc. Tim has spoken at multiple KubeCon + CloudNativeCon’s, many open source conferences and networking/mentoring events.

Dan Lorenc is co-founder and CEO of Chainguard, a leading software supply chain security company. He started projects like Minikube, Skaffold, and Kaniko to make containers easy and fun, then got so worried about the state of OSS supply-chains he helped found the Tekton and Sigstore projects to make it easier to build and use containers securely; as well as SLSA to create a common language for software security and supply chain integrity.

Window Snyder is a computer security expert, and Founder & CEO of Thistle Technologies. She has been a top security officer at Fastly, Square, Inc., Apple, Fastly, Intel and Mozilla Corporation. She was also a Senior Security Strategist at Microsoft. She is co-author of Threat Modeling, a standard manual on application security.

Jim’s career spans three of the largest technology trends to rise over the last decade: mobile computing, cloud computing and open source software. Today, as executive director of The Linux Foundation, he uses this experience to accelerate innovation in technology through the use of open source and Linux.

At The Linux Foundation, Jim works with the world’s largest technology companies, including IBM, Intel, Google, Samsung, Qualcomm, and others to help define the future of computing on the server, in the cloud, and on a variety of new mobile computing devices. His work at the vendor-neutral Linux Foundation gives him a unique and aggregate perspective on the global technology industry.

Jim has been recognized for his insights on the changing economics of the technology industry. His writing has appeared in Businessweek, Wired, and other top technology journals, and he is a regular keynote speaker at industry events. He advises a variety of startups, including Splashtop, and sits on the boards of the Global Economic Symposium, Open Source For America, and Chinese Open Source Promotion Union.

Dr. Carol Woody is principal researcher for the CERT division of the Software Engineering Institute. She focuses on cybersecurity engineering for building capabilities and competencies to measure, manage, and sustain cybersecurity and software assurance for highly complex software-reliant systems and systems of systems. Dr. Woody coauthored a book Cyber Security Engineering: A Practical Approach for Systems and Software Assurance published as part of the SEI Series in Software Engineering.

Megan is a software engineer at Defense Unicorns, focused on helping solve software challenges for the DoD. Her primary role is a developer on the Lula open source tool which enables faster and more robust evaluation of system compliance to various controls and standards.

Air Force Officer, long-time nerd, working to revolutionize software deliver for the DoD from the inside.

Laurent is a software engineer with over 20 years of experience in software development in the private and public sectors with extensive experience contributing to open source software. Since 2016, he has built and maintained Docker Official Images before joining Docker in 2023 to work on artifact security and software supply chain challenges.

Accomplished Information System Security Professional with proven experience developing, integrating, and sustaining information security programs ranging from $30 million to $500 million multi-year sustainment contracts supporting nationally critical missile warning, missile defense, and space situational awareness command and control systems.

Dr. David A. Wheeler is an expert on open source software (OSS) and on developing secure software. His works on developing secure software include “Secure Programming HOWTO”, the Open Source Security Foundation (OpenSSF) Secure Software Development Fundamentals Courses, and “Fully Countering Trusting Trust through Diverse Double-Compiling (DDC)”. He is the Director of Open Source Supply Chain Security at the Linux Foundation and teaches a graduate course in developing secure software at George Mason University (GMU). Dr. Wheeler has a PhD in Information Technology, a Master’s in Computer Science, a certificate in Information Security, a certificate in Software Engineering, and a B.S. in Electronics Engineering, all from George Mason University (GMU). He is a Certified Information Systems Security Professional (CISSP) and Senior Member of the Institute of Electrical and Electronics Engineers (IEEE). He lives in Northern Virginia.

Kiah is a developer who advocates for all things identity at Auth0. She is a public speaker who regularly presents at conferences and is a self-proclaimed opinionated knowledge seeker. Kiah has 13 years of experience covering both engineering and business roles and prides herself on bringing a unique perspective to building products from idea to deployment and navigating product-market fit. In her spare time, Kiah enjoys blogging about community, tech, and startups at blkgrlcto.com

Joseph Zang is currently the InnerSource Lead Associate at Fannie Mae, where he champions innovation and enhances the developer experience. Passionate about the collaborative and equitable aspects of Open Source and InnerSource, Joe is dedicated to impactful, empathetic engineering Joe began his career in IT at the University of Pennsylvania. His interests led him to Drexel University, where he produced and managed LMS Platforms. Later at the University of Florida, he served as Project Manager.

Lauren Hanford is VP of Product at Tidelift, working alongside maintainers to deliver secure software outcomes. At her heart, she is a UX researcher and approaches technology from a user-centered place. Lauren created the TACOS framework for open source secure development practices attestations. Her background is in product, UX design, and UX research.