GrammaTech Expert Invited to Discuss Software Supply Chain Security at Automotive Cybersecurity 2022 Conf

Walter Capitani to Present Solo Session on Software Bill of Materials, and Participate on a Panel with Cybersecurity Executives from General Motors, Rivian and Polaris

GrammaTech, a leading provider of application security testing products and software research services, announced today that embedded and enterprise software security expert Walter Capitani has been invited to present in two sessions on software supply chain security at the Automotive Cybersecurity Silicon Valley 2022 Conference.

Many software components used in automobiles are not developed directly by car manufacturers themselves or even their tier-one suppliers, and a large portion of them contain open-source code. However, security and quality can vary depending on the source of the software and methods to test the code. Because of how this code is delivered, manufacturers can't be certain if reused components are secure and high quality. Walter will discuss steps that must be taken to alleviate this risk.

WHO: Walter Capitani, Director, Technical Product Management for GrammaTech is a recognized expert in embedded and enterprise software security. Walter has led product teams delivering solutions to worldwide markets for safety-critical and secure software development and SaaS application performance. Walter holds a degree in Electrical Engineering from the University of Waterloo and is an MBA graduate of the Telfer School of Management.

WHAT: Walter will present in the following sessions:

Supply Chain Key Management: Panel Discussion Re-aligning Keys and Re-establishing the Trust Relationship

At the end of the day, it all comes down to the secret keys that are being loaded onto the modules. A lot of it is reliant on the trust relationship between a Tier-2 supplier who manufactures a component, gets it to the Tier-1 suppliers, and then finally to the vehicle manufacturer. How this relationship or key management is handled throughout the vehicle's lifecycle for 10-15 years is a major challenge. In this multi-stakeholder panel discussion Walter will join representatives from General Motors, Rivian and Polaris to brainstorm and share best practices on effective key management.