Name: SBOM 101: How to Control Software Supply Chain Risks Like a Pro
Start: 2023-05-18T14:00:00Z
End: 2023-05-18T14:00:59.000Z
Location: BrightTALK
Rating: 4.8

The Object Management Group® (OMG®) is an international, open membership, not-for-profit technology standards consortium. Founded in 1989, OMG standards are driven by vendors, end-users, academic institutions, and government agencies.

Join us for the presentation of the best-in-class Digital Engineering (DE) with MBSE and Virtual Twin example in context of portable Robotic Arm. This example shows the practical impact of systems engineering across the entire product lifecycle. We will engage in fully integrated system - the Robotic Arm. We will experience the intersection of engineering disciplines: systems engineering, electrical and mechanical design, manufacturing, implementation, and verification & validation (V&V). This is done through the digital thread and co-simulation using solutions as CATIA Magic (Cameo), 3DEXPERIENCE platform, 3RD party integrations leveraging open standard including SysML, Modelica, IoT – MQTT, FMI.

We will provide clear models, a virtual environment for the digital thread, and physical hardware to bridge the virtual with the real. It is a compact modular sample highlighting a major paradigm in digital engineering education and industry. The project includes a highly portable robotic arm. It comes in a small box and is affordable at $65 on Amazon.

Digital Engineering and MBSE with Virtual Twins: Streamlining Robotic Arm Design and Deployment

Automatically producing accurate SBOMs is considered just “table stakes” when it comes to open source risk management nowadays. Many organizations have matured their SBOM programs because they have more sophisticated needs. They also need to consume SBOMs from another source and automatically understand the contents. Some organizations need to go even further to enrich complex SBOMs with proprietary components, custom license properties, and more. Software intelligence technology helps automate the process of managing more complex SBOMs to ensure organizations can deliver accurate, up to date, and compliant SBOMs whenever needed.
 
Join this webinar to:
 
• Understand key challenges and requirements for more complex SBOMs
• Learn how software intelligence technology helps automate management of complex SBOMs
• See an example of free SBOM management technology in action for consuming and enriching complex SBOMs

Register now, all registrants receive the SBOM manager complimentary.

SBOM 201: Consuming and Enriching Complex SBOMs

Join us for a special installment of the DDS Foundation webinar series, presented by ExxonMobil. This session is designed for professionals in industrial automation, IT infrastructure, and systems architecture who are interested in enhancing the reliability and operational efficiency of edge computing systems through advanced fault tolerance technologies. Discover how ExxonMobil has successfully integrated the Data Distribution Service (DDS) into their fault tolerance strategies, showcasing the power and versatility of DDS in real-world applications.

As edge computing becomes increasingly crucial in industrial automation, the need for robust system reliability and data integrity intensifies. This webinar will explore the integration of DDS with Open Configurable Fault Tolerance (OCFT) to fortify edge clusters, ensuring high availability and seamless interoperability. Participants will learn about the pivotal role DDS plays in enhancing fault tolerance capabilities, directly from the experiences and successes of ExxonMobil.

Leveraging DDS for Enhanced Fault Tolerance in Edge Clusters

The Real-Time Publish-Subscribe (RTPS) is the network communication protocol that enables real-time data exchange between distributed systems. In this webinar, we’ll provide an overview of RTPS and explore how it serves as the underlying wire protocol for DDS, enabling seamless and reliable data exchange in real-time, distributed systems.
 
We will discuss:
• The motivation behind RTPS
• The basics of RTPS messages and sub-messages
• RTPS discovery
• How DDS Security affects RTPS

Whether you're building autonomous vehicles, robotics, or mission-critical industrial applications, understanding RTPS is key to leveraging the full power of DDS. Join us to dive deeper into how RTPS ensures low-latency, scalable communication across your distributed systems.

RTPS: The Interoperable Wire Protocol for DDS Systems

Data Semantics should be at the core of all computing, and especially the sophisticated computing required in the financial sector for AI, complex analytics, and large-scale computing, but why are most institutions still struggling to get it right?.  After all, in the context of data, “semantics” refers to the study of meaning within data, and recognizing the true meaning of data by understanding the relationships between different data points and entities, There are multitudes of ontologies being fielded, from FIBO* to FIGI** and more, and data semantics are even written into the recent Financial Data Transparency Act,  but practically, as an industry we still have far to go to implement semantics – whether proprietary or standardized – into our enterprises and our work for maximum effect.  Few organizations are expert, and many are still trying to get started.

This webinar is for any business or technology professional who wants to understand financial semantics for data and how to put the technology, including existing standards, to work.

The Object Management Group’s Standards Development Organization (OMG) and the Enterprise Data Management Council (EDMC) have long been committed to enabling banks and other financial institutions to incorporate semantics into their enterprise data operations.  

For this webinar they will be bringing top experts and practitioners from their teams and memberships to:

- Refresh – or, if you are new to semantic data, inform – your understanding of financial data semantics
- Learn how to use data semantics for maximum impact in your business, including cases
- Get updated on the major semantic standards initiatives , including FIBO and FIGI
- Hear about the proposed new Semantic Mapping and Types specification, and how you can participate in its development and roll-out

Putting Data Semantics to Work…Finally…In Financial Institutions

Discover how the Data Distribution Service (DDS) can revolutionize your software architecture. This webinar will provide an in-depth look at the architectural advantages of DDS over MQTT and OPC UA, illustrating its impact on system design, performance, scalability, and real-time decision-making at the edge. Ideal for software architects seeking to leverage middleware solutions to optimize industrial automation and other complex, data-centric applications.

This webinar will cover:
1. What is DDS?
- Brief introduction to DDS and its core concept
- The importance of middleware in modern software architecture
2. DDS vs. MQTT and OPC UU
- Comparative analysis of DDS, MQTT, and OPC UA
- Limitations of MQTT and OPC UA in next-generation architectures
- Unique strengths of DDS that address these limitation
3. Enabling Next-Generation Architecture with DDS
- How DDS supports complex, scalable, and high-performance system
- Architectural benefits: data-centricity, quality of service (QoS), and robustness
- Case studies demonstrating next-generation architectures enabled by DDS
4. Real-Time Decision Making at the Edge
- The significance of real-time data handling in modern applications
- How DDS enables real-time decision-making through its data-centric approach
- Examples of edge computing solutions leveraging DDS for instant insights and actions
5. DDS in Industrial Automation
- Case studies: Success stories from the AMR and ASRS markets
- Real-world examples of DDS in action
6. Designing with DDS: Best Practices
- Architectural patterns and strategies for DDS integration
- Tools and frameworks that complement DDS (e.g., your vendor-agnostic development and operations tool)
7. DDS and the Future of Middleware Solutions
- Trends and future directions in middleware and DDS
- How to stay ahead of the curve as a software architect

Edge Intelligence and Beyond: Transforming Systems with DDS

This webinar will cover a set of best practices when it comes to designing a DDS based system. It will present a step by step process to go from initial design to eventual deployment, and cover topics like:

• How to break up your domain specific information model into a set of normalized topics that minimizes overhead and maximizes performance and throughput?
• How to select the appropriate QoS policies for each of those topics?
• How to efficiently separate the various traffic flows in your system so that you balance between low latency and high throughput.
• Low bandwidth connections don't need to sacrifice bandwidth for traffic they are not interested in
• High priority traffic never gets interrupted/delayed by sudden bursts of low priority traffic.

Designing your DDS System for Performance and Scalability

Model-Based System Engineering (MBSE) is evolving to support the complexity of embedded and distributed applications, which often have strict requirements in terms of performance, scalability, robustness and security.

Data Distribution Service (DDS) addresses the communications requirements between system components running across different computers, including connectivity, security and quality of service (QoS). This session will focus on how to simplify and streamline MBSE with DDS. 

The session will include a demonstration to rapidly model DDS with MBSE using Dassault Systèmes Cameo Systems Modeler™ and the CATIA Magic Real-Time Communication Designer, the software plugin that provides a direct integration to DDS. This enables the graphical design and configuration of all DDS aspects, including Domains, Types, Topics and QoS.

Audience Q&A will follow the discussion.

Attendees will learn: 
- Concepts and Fundamentals of SysML interfaces 
- Integrating SysML with DDS  
- Demonstration

Connecting MBSE with Interface Design Using DDS: A best practice approach

Panelists:
Jimmie “Bud” Davis, Assistant Professor, University of Texas
Gerardo Pardo, CTO, Real-Time Innovations (RTI)
Justin Wilson, Principal Software Engineer, OpenDDS Foundation / Unity Foundation
Moderated by: Nick Stavros, CEO, Jackrabbit Consulting

From its first use case with the US Navy to today’s breadth of applications, the Data Distribution Service (DDS) standard has stood the test of time in enabling real-time communications across distributed systems. Please join this panel in a lively discussion that includes: 

• Why DDS has stood the test of time 
• Unexpected use cases and applications running DDS
• The process to expand the DDS standard 
• What’s next in DDS

The panel will be followed by audience Q&A.

The Past, Present and Future of the DDS Standard

In this webinar, you will learn how to use the Cloud Working Group discussion paper on “Domain Taxonomies for Data Governance,” issued by OMG in December 2023, to identify, inventory, tag and manage sensitive information stored in the cloud. The “domains” of the title refer to personal data protection, export controls, classified or defense information, and intellectual property. The paper also presents some of the mechanisms and tools that can be used to secure such information, and a scheme to attach classification labels to each dataset.

Domain Taxonomies for Data Governance

One of the fundamental concepts in the DDS technology is the use of data type information to make data exchange robust, efficient, and feature-rich.  The X-Types specification provides a rich toolset for defining data types for use in DDS systems.  This includes how data types are defined, how they may evolve, how they are exchanged between DDS participants at run-time, and rules for data type assignability.

In this episode of the DDS Foundation's 20th anniversary webinar series, we will explore the Extensible and Dynamic Types for DDS (or "X-Types") specification and learn how this very important component of the DDS standards impacts the design, function and interoperability of DDS systems.

Exploring DDS X-Types

We have been developing software for well over half a century. Throughout that time, people have proposed practices and methods that promise high performance for teams that choose them. Yet, beyond the few case studies accompanying the advertising and the hype, we don’t seem to see the promised results.  
This inevitably leads to new and better methods that promise to address the failings of their predecessors. But they don’t. They also have their shortcomings, and beyond the few case studies accompanying the new hype, they fail to bring the promised results to teams that adopt them. 

The answer is not to create new and better methods and frameworks. Instead, we must look into why methods fail to deliver what they promise and overcome those problems. That’s what Ivar Jacobson set out to do and what led to Essence being adopted as an OMG Standard ten years ago.  

In those ten years, we have seen a growing number of experts and methodologists use Essence to describe their frameworks and practices, and an increasing number of teams and organizations adopt Essence. 

This talk will explore some of the use cases of Essence and the value it can provide to various stakeholders, including the methodologist, the team, and the organization. We will share some success stories and look to the future by describing some of the changes proposed for Essence 2.0 and the drivers behind them. We will also explain why Essence is designed for a world of living and breathing AI.

Whether you are entirely new to Essence or already enjoying its benefits, there will be something to interest you in this talk.

Essence – The Standard Bearer for High-Performing Teams

Cybersecurity is critical in developing and running complex, distributed systems.  As systems become more interconnected and intelligent, protecting data against cyberattacks and unauthorized participants becomes increasingly challenging. The first step to securing a distributed system is to protect its data.  

As a publish/subscribe protocol, DDS helps ensure that only authorized users and nodes can transmit and receive data, providing zero-trust, end-to-end data protection and data-origin authentication. 

The DDS Security specification defines the security model and Service Plugin Interface (SPI) architecture for DDS-compliant implementations. This enables out-of-the-box security between compliant DDS applications. Specifically, the use of SPIs allows DDS users to customize the authentication, access control, encryption, message authentication, digital signing, logging and data tagging.

The OMG will release an updated version of the DDS Security specification later this year. Last updated in 2018, the updated version includes new cryptographic algorithms, key rotation, support for dynamic revocation of credentials and hardness against DoS attacks. This webinar will provide an overview of the DDS Security spec with an emphasis on the new features. The presentation will be followed by audience Q&A.

Speaker
Gerardo Pardo, co-chair, DDS SIG, Lead Author of the DDS-Security specification, and CTO, Real-Time Innovations (RTI)

What’s New in the DDS Security Standard

Developers of systems running Data Distribution Service (DDS) use Quality of Service (QoS) policies to configure the behavior of the service.  For example, a user can declare that a DataWriter and DataReader are reliable, which obligates the service to deliver each and every sample from the DataWriter to the DataReader.  QoS separates the concerns of "what" (reliable data transfer) from "how" (resends, acknowledgments, etc.).
 
In this talk, we will
• introduce the 22 QoS policies in the DDS Specification
• describe use cases for various QoS policies
• look at a few "gotchas" related to QoS
 
The session will include an audience question and answer.

DDS: The FAQs about QoS

Join CISQ and Puppet by Perforce on February 15th and February 29th for a two-part series on Secure Critical Infrastructure for Continuous Compliance Standard.

Our event moderator, Chris Ganacoplos, AVP, Puppet will be joined by Tim Schilbach, CEO Penacity, and Paul Reed, Principal Solutions Engineer, Puppet for the second part of the series on February 29th, where they will present a demo of secure critical infrastructure with Continuous Compliance Framework enforcement modules for the operating system and hardening of systems and present what a solution with requirements will entail.

Secure Critical Infrastructure for Continuous Compliance Standard Solution

Join us for a technical DDS 101 webinar, a high-level introduction to the OMG's Data Distribution Service technology and standards.

The Data Distribution Service (DDS) from the Object Management Group (OMG) is a data connectivity framework becoming standardized in a wide range of industries and military systems.  From autonomous vehicles and embedded medical devices to electrical grids and intelligence and weapon systems, DDS is found in a growing number of architecture standards and government contracts. 

This webinar will focus on the technical features of DDS in the context of today's real-world use cases.

Introduction to the Data Distribution Service (DDS) Standard

Join CISQ and Puppet by Perforce on February 15th and February 29th for a two-part series on Secure Critical Infrastructure for Continuous Compliance Standard.

On February 15th, 2023 at 11:00am CT we'll kick off with a panel that will discuss the need and elements of SCI and why and how to meet Compliance Framework Regulatory Standards like CMMC, NIST, CIS, DISA STIG, PCI, and FINRA.

Our event moderator, Chris Ganacoplos, VP of East and Federal for Puppet Perforce IT Operations, Perforce will be joined by Tim Schilbach, CEO Penacity, for the first part of the series on February 15th, where they will discuss the challenges of Secure Critical Infrastructure. We will touch on Why Secure Critical Infrastructure is important, especially for stakeholders who need CMMC 2.0 certified with the NIST framework. We will discuss strategic and tactical topics you must implement in your program to be successful.

On February 29th, we'll be back with the addition of Paul Reed, Principal Solutions Engineer, Puppet by Perforce, who will give a presentation with Tim Schilbach and an in-depth demonstration that discusses the challenges of Secure Critical Infrastructure. We will review what it takes to build and deliver Secured Critical Infrastructure leveraging CMMC 2.0 certified and Center for Internet Security frameworks. We will demo an automated environment with policy as code, reporting, and auditing dashboards.

Secure Critical Infrastructure for Continuous Compliance Standard Panel

DDS turns 20! In 2024, we celebrate 20 years of DDS innovation. From its first use case that enabled distributed communications for US Navy ships to the autonomous systems of today, the DDS family of standards has enabled new generations of applications to run reliably, rapidly and securely, regardless of distance or scale. 

To commemorate this milestone, the DDS Foundation will be running a year-long celebration to highlight the 14 specifications in the DDS standard, along with selected real-world use cases. 

Kicking it off on January 18 is a webinar that starts at the beginning: A discussion with the original Principal Developer of the original Proof of Concept experiments, along with the lead developer of the original DDS standard. Audience Q&A is encouraged. 

The audience will gain insights into the development of the original DDS standard, including:
- Why the US Navy needed a distributed communication protocol
- Insights from the original developer of the core technology
- How it became a standard
- And more! 

Speakers
Gerardo Pardo, co-Author of the original DDS standard and CTO, Real-Time Innovations (RTI)
Mark Swick, Former Principal on US Navy project that formed the DDS standard; currently Systems Architect, Real-Time Innovations

DDS, the US Navy, and the Need for Distributed Software

Software now powers everything from smartphones and cars to medical devices and critical infrastructure. However, with the rise of cyber threats and recent government orders, it is crucial to clearly understand what components are in the system, where they came from, who has had access to them, whether they are subject to licenses, and whether they harbor known vulnerabilities. This is where Software Bill of Materials (SBOM) comes in.
 
Join us for an informative webinar on SBOM. In this webinar, you will learn how Software Component Analysis (SCA) is key to having an up-to-date SBOM and get answers to these critical questions:

1. Why are SBOMs critical for software development, security, and compliance?
2. How are SBOMs implemented and used to control software supply chain risks?
3. What are the contents of an effective SBOM?
4. What are the challenges and risks associated with SBOM implementation?
5. What are tools and best practices for creating and maintaining an effective SBOM?
 
This webinar is ideal for software developers, security professionals, compliance officers, IT managers, and anyone interested in learning about SBOM and its impact on software supply chain management. Don't miss this opportunity to gain valuable insights and ask questions to our expert speaker. Register now!

SBOM 101: How to Control Software Supply Chain Risks Like a Pro

software bill of materials

SBOM

Supply Chain

Risk Management

software risk

Software Asset Management

Procurement

Security

Security Analysis

Cyber Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The IT project management community on BrightTALK includes thousands of IT project and portfolio management professionals. Find relevant webinars and videos on agile methodologies, scrum strategy, project management processes and more. Attend live webinars or view on demand content presented by recognized thought leaders in the IT project management industry.

IT Project Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

SBOM 101: How to Control Software Supply Chain Risks Like a Pro

Presented by

About this talk

More from this channel