HITCON x COSCUP 開源資安

在臺灣，開源軟體已廣泛應用於各行各業。其開放不僅促進了技術創新，還使得社群能夠共同發現並修補漏洞，提升軟體的安全性。然而，隨著應用的深入，供應鏈安全、漏洞管理等挑戰也日益凸顯。國際間，諸如開源安全基金會（OpenSSF）等組織正積極推動開源軟體安全專案，例如：惡意套件儲存庫，用於辨識並公開報告惡意套件，提升套件使用的透明度；GUAC，軟體安全評估工具，透過聚合軟體相依項目的安全後設資料，分析評估軟體供應鏈安全。 HITCON 與 COSCUP 首度合作，推出「開源資安」議程軌，旨在提升臺灣在開源資安領域的實力，促進社群合作，強化資安防護。建議投稿主題： - 開源資安工具的開發與應用 - 供應鏈安全與信任機制開源解決方案 - 密碼學的開源研究 - 硬體安全的開源實踐 - 資安社群的協作與推廣

In Taiwan, open-source software has been widely adopted across various industries.
Its openness not only fosters technological innovation but also enables communities to collaboratively identify and patch vulnerabilities, enhancing software security.
However, as the adoption deepens, challenges such as supply chain security and vulnerability management have become increasingly prominent.
Internationally, organizations such as the Open Source Security Foundation (OpenSSF) are actively promoting open-source software security projects, including: Malicious Package Repository, a tool for identifying and publicly reporting malicious packages to enhance package usage transparency; and GUAC, a software security assessment tool that aggregates security metadata of software dependencies to analyze and evaluate software supply chain security.
Therefore, HITCON and COSCUP are collaborating for the first time to launch the ""Open-source Security"" track, aiming to enhance Taiwan's capabilities in open-source security, promote community collaboration, and strengthen cybersecurity defenses.
Suggested Topics for Submission: - Development and application of open-source security tools - Open-source solutions for supply chain security and trust mechanisms - Open-source research in cryptography - Open-source practices for hardware security - Collaboration and promotion within security communities