Trust, but Verify: Proactive Security in Open Source - Eve Martin-Jones, Google

The Linux Foundation - Trust, but Verify: Proactive Security in Open Source - Eve Martin-Jones, Google