Open Source Summit Europe 2025: Full Schedule

25-27, August 2025
Amsterdam, Netherlands
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time, CEST (UTC +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

arrow_back View All Dates

11:00 CEST

Granite Guardian: Safeguarding Large Language Models Against Risks - Shalini Harkar, IBM

Tuesday August 26, 2025 11:00 - 11:40 CEST

TBA

IBM is dedicated to promoting Responsible AI by equipping developers with cutting-edge tools that improve fairness, transparency, and accountability of AI systems. In line with this effort, this session is designed to introduce Granite Guardian, an open-source suite of AI models that allow developers to monitor AI systems, mitigate bias, and comply with regulations. Granite Guardian is not just an open-source suite of AI models; it is a comprehensive AI governance framework, a strategic enabler for creating responsible, transparent, and compliant AI at scale. Attendees will leave this session with knowledge of AI governance and a set of tools that allow them to create, launch, and manage AI responsibly. Whether they are developers who already embed ethical AI behaviour into their designs, or industry leaders aligning with ethical and regulatory guidance, this session will empower them to create scalable, not just sustainable, AI.

Speakers

Shalini Harkar

Shalini Harkar , Lead AI advocate, IBM, IBM

Shalini is an Lead AI advocate at IBM. With an overall experience of 12 years in AI space she has spearheaded multiple research and pioneering enterprise solutions enabling technology adoption at scale. As a committed Granite Advocate, she champions Responsible AI, fostering awareness... Read More →

Tuesday August 26, 2025 11:00 - 11:40 CEST
TBA

Digital Trust

Audience Experience Level Intermediate

11:55 CEST

ManaTEE: Enabling Verifiable AI Transparency With Confidential Computing - Dayeol Lee & Mingshen Sun, TikTok

Tuesday August 26, 2025 11:55 - 12:35 CEST

TBA

ManaTEE is an open-source framework that enables private data analytics for public research using Trusted Execution Environments (TEEs). In this talk, we show how ManaTEE supports verifiable AI transparency, especially for proprietary models where open inspection is not feasible. TEEs allow sensitive model evaluation and data analysis in isolated, secure environments with cryptographic attestation, ensuring the integrity of both the model and data. This enables external researchers and auditors to assess AI systems without direct access to the model or sensitive data. ManaTEE simplifies this process with a secure, interactive Jupyter Notebook interface where users can load benchmarks, write evaluation code, and analyze results—preserving data confidentiality and model secrecy. We will demo how ManaTEE evaluates a closed-source AI model in a reproducible and auditable way, helping balance the need for transparency with confidentiality.

Speakers

Dayeol Lee

Research Scientist, TikTok

Dayeol Lee is currently a research scientist at TikTok's Privacy Innovation Lab. His research interests are system security, trusted computing, and computer architecture. He earned his Ph.D. in Electrical Engineering and Computer Sciences from the University of California, Berkeley... Read More →

Mingshen Sun

Research Scientist, TikTok

Mingshen is leading application and innovation of the trusted/confidential computing technologies at TikTok. Previously, he worked on multiple open-source projects towards building safe, secure and trustworthy systems. Mingshen also published papers and gave talks on topics at the... Read More →

Tuesday August 26, 2025 11:55 - 12:35 CEST
TBA

Digital Trust

Audience Experience Level Beginner

14:10 CEST

OpenSSH + FIDO Workshop - Joost van Dijk, Yubico

Tuesday August 26, 2025 14:10 - 15:45 CEST

TBA

OpenSSH has built-in support for FIDO security keys since version 8.2 (released in 2020). This means you can protect your SSH private keys using security keys, similar to how this can be done with OpenPGP smart cards and cryptographic tokens that support PKCS#11. Although such devices all allow you to protect your private keys using cryptographic hardware, the benefits on using FIDO include:

- FIDO is easier to use, especially for beginners

- security keys can be used on the web as well to store passkeys

- no need for vendor-specific software (like PKCS#11 modules)

- security keys are inexpensive

- FIDO features device attestation, which lets you cryptographically prove you are using a specific security key make and model.

In this talk, we will give a short introduction to FIDO security keys, and provide several demos of the use of security keys with OpenSSH, such as signing arbitrary data, authenticating to remote systems, and using key attestation.

The talk consists of a number of demos that participants can follow along on their system. Participants can bring their own security key (any vendor will do). If they do not own a security key one will be provided to them.

Speakers

Joost van Dijk

Sr Solutions Architect, Yubico

Joost van Dijk is a Solutions Architect at Yubico. He focuses on securing digital identities and accelerating the adoption of open source authentication standards as part of Yubico's developer program.

Tuesday August 26, 2025 14:10 - 15:45 CEST
TBA

Digital Trust

Audience Experience Level Any

16:20 CEST

Zero Trust at the Edge: Bridging Industrial Systems With Verifiable Credentials and OpenZiti - Shane Deconinck, Howest University of Applied Sciences

Tuesday August 26, 2025 16:20 - 17:00 CEST

TBA

Industrial environments depend on secure collaboration among internal employees and external technicians. Traditional centralized identity systems like LDAP fall short when managing external parties, while industrial constraints prevent modifying legacy equipment.

This session presents a pragmatic architecture using open-source tools - including OpenZiti and W3C Verifiable Credentials (VCs) - to enforce Zero Trust precisely at the application level. By combining decentralized identity management for external supplier technicians with corporate OIDC for internal staff, we demonstrate how to achieve secure, identity-aware communication flows without rewriting legacy MQTT hardware.

Attendees will learn how application-level binding ensures that only explicitly authorized actions occur, preventing any unauthorized bypass even in constrained industrial setups. The approach not only strengthens security in today’s complex environments but also boosts the value and potential of these emerging technologies through practical integration.

Speakers

Shane Deconinck

Web3 Lead, Howest University of Applied Sciences

Shane is the Web3 Lead Howest Cyber3Lab, focusing on building trust through decentralized technologies. Since 2017, he's been conducting applied research on how these emerging technologies can empower citizens and businesses in the digital age.

Tuesday August 26, 2025 16:20 - 17:00 CEST
TBA

Digital Trust

Audience Experience Level Beginner