Watch and track your favorite playlist.
Curated by: The Linux Foundation (287 videos)
Don't miss out! Join us at the next Open Source Summit in Seoul, South Korea (November 4-5). Join us at the premier vendor-neutral open source conference, where developers and technologists come together to collaborate, share knowledge, and explore the latest innovations and advancements in open source technology. Learn more at https://events.linuxfoundation.org/ Confirming Safety of IAM Specifications and their OSS Implementations: Keycloak as a Case Study - Takashi Norimatsu, Hitachi, Ltd. To securely deploy an identity and access management product implementing authentication & authorisation specifications like OpenID Connect 1.0 and OAuth 2.0 respectively, we need to ensure that the specifications are safe, the product correctly implements the specifications, and the product does not contain any vulnerabilities specific to the specifications. Methods for checking these points are formal analysis, conformance testing, and vulnerability testing, respectively. However, developers are not usually familiar with them. Based on the speaker’s investigation on academic research, the speaker describes them in a straightforward way. The speaker is a maintainer of Keycloak, identity and access management open source software, CNCF incubating project. Therefore, the speaker will use Keycloak as a case study and explain how the specifications that Keycloak implements are verified to be secure and how Keycloak is verified to be compliant with the specifications. The audience could gain insight into how to ensure that the identity and access management product they use or develop is secure.