In this episode of “What’s In The SOSS,” Yesenia interviews David A. Wheeler, the Director of Open Source Supply Chain Security at the Linux Foundation. They discuss the importance of secure software development, particularly in the context of AI and machine learning. David shares insights from his extensive experience in the field, emphasizing the need for both education and tools to ensure security. The conversation also touches on common misconceptions about AI, the relevance of digital badges for developers, and the structure of a new course aimed at teaching secure AI practices. David highlights the evolving nature of software development and the necessity for continuous learning in this rapidly changing landscape.

Chapters: 

00:00 Introduction to Open Source and Security

02:31 The Journey to Secure AI and ML Development

08:28 Understanding AI's Impact on Software Development

12:14 Myths and Misconceptions about AI in Security

18:24 Connecting AI Security to Open Source and Closed Source

20:29 The Importance of Digital Badges for Developers

24:31 Course Structure and Learning Outcomes

28:18 Final Thoughts on AI and Software Security

Episode links:

• David A. Wheeler’s LinkedIn page
• Secure AI/ML-Driven Software Development (LFEL1012)
• OpenSSF Education
• Get involved with the OpenSSF
• Subscribe to the OpenSSF newsletter
• Follow the OpenSSF on LinkedIn