Steve Poole

How the Eclipse Foundation, industry and academic partners are working together to address the challenge of measuring and improving the security posture of open-source projects in practical, compelling and above all adoptable ways.

The Eclipse Foundation is partnering with the Linux Foundation and others to find practical and adaptable ways of improving project security posture.

From simple process aspects like having a stated vulnerability process to more sophisticated elements such as SBOMs or secure build processes. There are many ideas, tools, checklists and opinions. This session will explain how the EF is planning to navigate this space to create a compelling framework that will allow projects to improve with limited or no impact.

The PowerPC/AIX porting project currently driven by IBM and SAP is a good example how the OpenJDK fosters the cooperation of different players in the Java ecosystem in an open environment.

The project was initially started in June 2012 with the goal to provide a full-featured and certifiable version of OpenJDK on the Linux and AIX PowerPC platforms. By now the PowerPC/AIX port can successfully run a couple of different standard benchmarks in mixed mode (C++ interpreter plus C2 "server" JIT compiler) and passes the JCK test on both platforms.

This talk will describe what we've done to reach the current state and what still needs to be done until we can integrate our port into the main JDK8 code line which is the ultimate goal of the project.

Other people: Volker Simonis Goetz Lindenmaier