Return-Oriented Policy Making for Open Source and Software Security

Presented at DEF CON 30 (2022), Aug. 13, 2022, 2 p.m. (105 minutes).

A moderated discussion on how to hack policy systems using laws and authorities already on the books, featuring the policymakers who write and use them, focusing on open source and software security. At DefCon 22 in the aftermath of Heartbleed, John Menerick told us to "keep calm and hide the internet". Alas, they found it. The policy community in the US, and lesser extent Europe, is finally starting to put serious focus on software security including open source. This event will bring hackers together with policymakers to identify policies on the book that could help improve the open source ecosystem and the security of software. Other policy conversations might stray into the possible, this one will emphasize the practical. The discussion will involve policymakers who write and implement these laws and use these authorities to enable discussion and debate focused on pragmatic solutions, putting hackers inside ongoing policy debates in real time.

Presenters:

• Eric Mill - US Office of Management and Budget
• Harry Mourtos - Office of the National Cyber Director
• Trey Herr - Director
  Trey Herr is the director of the Cyber Statecraft Initiative under the Scowcroft Center for Strategy and Security at the Atlantic Council. His team works on cybersecurity and geopolitics including cloud computing, the security of the internet, supply chain policy, cyber effects on the battlefield, and growing a more capable cybersecurity policy workforce. Previously, he was a senior security strategist with Microsoft handling cloud computing and supply chain security policy as well as a fellow with the Belfer Cybersecurity Project at Harvard Kennedy School and a non-resident fellow with the Hoover Institution at Stanford University. He holds a PhD in Political Science and BS in Musical Theatre and Political Science.

Links:

• https://forum.defcon.org/node/242838
• https://infocon.org/cons/DEF CON/DEF CON 30/DEF CON 30 video and slides/DEF CON 30 - Panel - Return-Oriented Policymaking.mp4
• https://infocon.org/cons/DEF CON/DEF CON 30/DEF CON 30 video and slides/DEF CON 30 - Panel - Return-Oriented Policymaking.srt (subtitles)

Similar Presentations:

• DEF CON 30 (2022) / Panel - DEF CON Policy Dept - What is it, and what are we trying to do for hackers in the policy world?
• DEF CON 30 (2022) / Hacking Aviation Policy
• DEF CON 31 (2023) / How hackers can send feedback directly to policymakers like the pros Workshop