OSS + ELC EU 2026: Full Schedule

7-9 October, 2026
Prague, Czechia
View More Details & Registration
Important Note: Timing of sessions and room locations are subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2026 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

arrow_back View All Dates

14:40 CEST

Sponsored Session: LLM-Assisted Vulnerability Research in Yocto - Anders Heimer, Ericsson Software Technology

Thursday October 8, 2026 14:40 - 15:20 CEST

Club A (Floor 1)

The Yocto Project provides several building blocks for supply-chain security, including pinned sources, checksums, source mirroring, SBOM support, and reproducible builds. These mechanisms are invaluable, but only as strong as the code behind them.

In this talk, I will describe a project in which I used LLMs to assist security research on selected Yocto Project components. I will explain how candidate findings were identified, manually triaged, reproduced, and filtered before being reported upstream.

The talk will cover how I separated real issues from false positives, assessed whether suspicious code patterns were exploitable, prepared reports that maintainers could act on, and upstreamed patches where appropriate.

Speakers

Anders Heimer

Senior Specialist Linux Build, Packaging and Integration, Ericsson Software Technology

Anders Heimer is a Senior Specialist at Ericsson Software Technology, where he provides Yocto expertise across Ericsson. His work focuses on embedded Linux, build systems, and software supply-chain and product security. He is a BitBake and OpenEmbedded contributor.

Thursday October 8, 2026 14:40 - 15:20 CEST
Club A (Floor 1)

Digital Trust

OSS + ELC EU 2026

14:40 CEST

Anders Heimer

Get help with the event