to cause. Contributors to Istio Istio is an open source project that accepts contributions from any user, vulnerabilities could be introduced innocently or on purpose to Istio. Contributors could harm harm Istio by attempting to intentionally introduce vulnerable code and subsequently exploit it. Contributors to 3rd party dependencies Istio uses open source 3rd party dependencies that may impact the security done by adding vulnerabilities on purpose or by accident. This threat actor can - similarly to contributors to Istio itself - seek to commit vulnerable code into the source tree of dependencies of Istio

may reject unrecognized values. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig- architecture/api-conventions.md#resources' type: string kind: description: 'Kind Cannot be updated. In CamelCase. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig- architecture/api-conventions.md#types-kinds' type: string spec: description: 'Specification istio control plane resource. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig- architecture/api-conventions.md#spec-and-status' type: object status: description:

Speaker Intro #IstioCon Istio Community Number of contributors last 12 months: 350+ contributing companies 500+ PR authors 1900+ contributors Istio Community #IstioCon Service Mesh Surveys Using

Started by teams from Google and IBM 2017 2018 2022-04 2023 2022-09 Community Growth New Contributors up 32% YoY 2022 2023 Contributor Experience Get Involved Ask Questions ● Join our Slack submit an issue. Become a Contributor ● The Istio Community README is the starting point for contributors who want to work on code, docs or other parts of Istio. ● You can access our trove of technical

the service mesh Istio, gRPC, Apache SkyWalking, Zipkin from Google, Twitter, & VMWare ● Top contributors to Envoy and Istio ● Wrote Istio: Up and Running, NIST SPs 800-204A, NIST SP 800-204B Sheng