Suggestions
David A. Wheeler
Director of Open Source Supply Chain Security at The Linux Foundation
David A. Wheeler is an accomplished expert in secure software development and open source software (OSS). He currently serves as the Director of Open Source Supply Chain Security at The Linux Foundation, a position he has held since April 2020. In this role, he focuses on enhancing the security of open source software supply chains, which is critical for the integrity and safety of software used globally.
Education and Professional Background
Wheeler holds a PhD in Information Technology, a Master's degree in Computer Science, and a Bachelor's degree in Electronics Engineering, all from George Mason University (GMU). He also has certifications including Certified Information Systems Security Professional (CISSP) and is a Senior Member of the Institute of Electrical and Electronics Engineers (IEEE) .123
Teaching and Research
In addition to his role at The Linux Foundation, Wheeler is an Adjunct Professor at GMU, where he teaches graduate courses on developing secure software. His academic involvement complements his extensive practical experience, which includes over 32 years at the Institute for Defense Analyses as a Research Staff Member and Project Leader before joining The Linux Foundation .12
Contributions to Open Source and Security
Wheeler has authored several influential works in the field, including "Secure Programming HOWTO" and has contributed to important initiatives like the Open Source Security Foundation's Secure Software Development Fundamentals Courses. His research also addresses countering malicious tools through techniques such as Diverse Double-Compiling .23
Recognition
Throughout his career, Wheeler has received various honors, including the Open Source Award from Open Source for America in 2011 and recognition as Outstanding Adjunct Faculty by GMU's Computer Science Department .12
In summary, David A. Wheeler's extensive background in secure software development and his leadership role at The Linux Foundation position him as a significant figure in enhancing the security of open source software.
Highlights
If you're involved in developing #software design, please participate in our Survey on Secure Software Development Education! We want to improve software education so we can improve #cybersecurity ; learning about the educational needs is a critical part of that. It should only take about 15 minutes to help set the direction of future work.
You can simply take the survey here: https://lnkd.in/exVqhxFr
If you're not sure you can first read more about the survey here: https://lnkd.in/e6P5QzRs
In Europe there's a proposed eIDAS Article 45.2, which would require browsers to accept "Qualified Website Authentication Certificates" (QWACS) issued by certificate authorities approved by European Union member states.
This is horrible idea and will hurt security. You don't want QWACS in charge of browser security. For more information:
https://lnkd.in/dZWDaAaW https://lnkd.in/dvSzSF9K https://lnkd.in/dVFTa-vm
