Name: Security Audits Are Not Scary - Applying a Novel Approach To an Industry Best Practice for 2 ASWF Pr - Amir Montazery, Open Source Technology Improvement Fund, Inc
Start: 2025-08-10T14:15:00-0700
End: 2025-08-10T14:35:00-0700

August 10 | Vancouver, British Columbia
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Days 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Pacific Daylight Time. To view the schedule in your preferred time zone, please select from the drop-down menu located at the bottom of the menu to the right.

Schedule Speakers Search

Event Schedule My Schedule0 View

Sunday August 10, 2025 2:15pm - 2:35pm PDT

Pinnacle Ballroom 1+2

This talk will go over the security audit engagements of OpenEXR and MaterialX. Commissioned and funded by ASWF and executed in early 2025, these engagements took a novel approach of applying security audit principles in a more focused, light-touch review of each respective project. Each engagement was about 40 person-hours and applied traditional best practices of expert third-party review; with a focus on improving the security posture of the project, and identifying high risk operations and code blocks based on the potential attack scenarios identified.

Speakers

Amir Montazery

Managing Director, Open Source Technology Improvement Fund, Inc

Amir Montazery is the Managing Director and Cofounder of Open Source Technology Improvement Fund, Inc (OSTIF). OSTIF is a Chicago-based organization focused on directly helping open-source software projects improve their security posture. Amir comes from a background in Finance, IT... Read More →

Sunday August 10, 2025 2:15pm - 2:35pm PDT
Pinnacle Ballroom 1+2

Session Presentation

Need help? View Support Guides
Event questions? Contact Event Planner

Open Source Days 2025

Amir Montazery

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!