Assistant Professor Santiago Torre-Arias from Purdue University, US, will give a HAIC Talk on Full-Stack Software Supply Chain Security: From Keyless Signing to Supply Chain Intelligence on Thursday, 8 October, in Dipoli, Aalto University.
Lecture description: Software Supply Chain Security remains one of the most devastating vectors of compromise. From SOLARBURST & Log4j, through xz-utils, attackers have been able to achieve devastating damages that cost not only vast monetary sums (estimated as $275 Billion by 2031) but also shift the geopolitical landscape — these vectors are widely used by major state actors.
Due to the complexity of these attack vectors, we require a holistic suite of solutions from various academic disciplines ranging from applied cryptography, systems security, data science and community management. My work in Sigstore, in-toto, GUAC, and more have become one of such suite of tools, and they have enjoyed widespread deployment throughout a myriad of application domains such as defense, logistics, telecommunications and, naturally, cloud computing.
This talk outlines more than a decade of work designing, building and deploying academic solutions that prevent, detect and shift the overall risk posture of the global software supply chain.
About the speaker: Santiago is an Assistant Professor at Purdue’s Electrical and Computer Engineering Department. His interests include binary analysis, cryptography, operating systems, and security-oriented software engineering. His current research focuses on securing the software development lifecycle, password storage mechanisms, and cyber-physical systems security. Santiago is a member of the Arch Linux security team and has contributed patches to F/OSS projects on various degrees of scale, including Git, the Linux Kernel, Reproducible Builds, NeoMutt, and the Briar project. Santiago is also a lead of the in-toto and Sigstore projects.
Time: 8.10.2026 at 16:00 – 17:30 (coffee and buns served from 15:30). The lecture will be approximately 60 minutes, after which there will be time for questions.
Venue: Lumituuli auditorium, Dipoli, Aalto University (Otakaari 24, Espoo).
Registration: https://link.webropol.com/ep/haic-talk-with-santiago-torres-arias
The event is open to all and free of charge, but we ask you to register for the event as it will help us to estimate the number of coffees ordered, thank you!