Commit-Then-Disclose: Cryptographic SBOM Auditing Without IP Leakage - Sharvil Bhatt & Swastik Gour
Sbom Software bill of materials Commit Then Disclose Cryptographic auditing Software supply chain security Cloud native security Ip protection Zero Knowledge proofs Container security Supply chain integrity
This talk presents Commit-Then-Disclose, a cryptographic protocol that enables auditing of Software Bill of Materials (SBOM) without exposing proprietary intellectual property. The approach allows security teams to verify software components and vulnerabilities while maintaining confidentiality of sensitive implementation details. Ideal for security engineers, DevSecOps practitioners, and cloud native platform teams concerned with software supply chain integrity.
Related videos
From Policy to Production: Implementing ISO27001/BSI IT-Gr... Marcus Ross, Hamburg Port Authority
Cloud Native Live: Falco's Nest & the Evolution of Runtime Security
Making the Most of Your Docker Hardened Images (Docker Tutorial)
How SBOMs and Engineering Discipline Can Help You Avoid Trivy’s Compromise
What Docker Sandboxes Get Right About AI Security
Run NanoClaw on MacBook Safely with Docker MicroVM Sandboxes
Spite-Driven Engineering: A New Blueprint for Cloud Security in the AI Native Era
No More Secrets With Keycloak's Federated Client Authentication - Rishabh Singh, Red Hat
Root Without Risk: A Decade-Long Quest for True Container Isolation - Sumir Broota
Mitigate software supply chain risks in Github Actions | ODSP938
Poison Control: Unifying Software and Content... Anmol Krishan Sachdeva & Ankit Kotnala, Google
