Organization:Open Source Security Foundation
![]() | |
Abbreviation | OpenSSF |
---|---|
Predecessor | Core Infrastructure Initiative |
Formation | 2020 |
Type | Nonprofit |
Purpose | Consolidating industry efforts to improve the security of open source software |
Location | |
Region served | Worldwide |
Membership | 94[1] |
General Manager | Omkhar Arasaratnam |
Parent organization | Linux Foundation |
Website | {{{1}}} |
The Open Source Security Foundation (OpenSSF) is a cross-industry forum for collaborative improvement of open-source software security.[2][3] Part of the Linux Foundation, the OpenSSF works on various technical and educational initiatives to improve the security of the open-source software ecosystem.[4]
History
The OpenSSF was formed in August 2020 as the successor to the Core Infrastructure Initiative, another Linux Foundation project.[5][6]
In October 2021, Brian Behlendorf was announced as the OpenSSF's first full-time general manager.[7] In May 2023, OpenSSF announced Omkhar Arasaratnam as its new general manager, and Behlendorf became CTO of the organization.[8]
Activity
Working Groups and Projects
The OpenSSF houses various initiatives under its 8 current working groups.[9][10] The OpenSSF also houses two projects: the code signing and verification service Sigstore[11] and Alpha-Omega, a large-scale effort to improve software supply chain security.[12]
Policy
The White House held a meeting on software security with government and private sector stakeholders on January 13, 2022.[13] In May 2022, the OpenSSF hosted a follow-up meeting, the Open Source Software Security Summit II, where participants from industry agreed on a 10-point Open Source Software Security Mobilization Plan, which received $30 million in funding commitments.[14][15] In August 2023, the OpenSSF served as an advisor for DARPA's AI Cyber Challenge (AIxCC), a competition around innovation around AI and cybersecurity.[16] In September 2023, the OpenSSF hosted the Secure Open Source Software Summit with the White House, where government agencies and companies discussed security challenges and initiatives around open source software.[17]
See also
References
- ↑ "Members" (in en-US). https://openssf.org/about/members/.
- ↑ "Google, Microsoft, GitHub, and Others Join the Open Source Security Foundation". https://www.infoq.com/news/2020/08/open-source-security-foundation/. Retrieved 10 August 2022.
- ↑ "Uniting for better open-source security: The Open Source Security Foundation". https://www.zdnet.com/article/uniting-for-better-open-source-security-the-open-source-security-foundation/. Retrieved 10 August 2022.
- ↑ "OpenSSF details advancements in open-source security efforts" (in en-US). 2022-06-21. https://venturebeat.com/security/openssf-details-advancements-in-open-source-security-efforts/.
- ↑ Anderson, Tim. "Linux Foundation rolls bunch of overlapping groups into one to tackle growing number of open-source security vulns" (in en). https://www.theregister.com/2020/08/03/linux_foundation_forms_openssf/.
- ↑ "Home" (in en-US). https://www.coreinfrastructure.org/.
- ↑ "Tech giants commit $10M annually to Open Source Security Foundation" (in en-US). 2021-10-13. https://venturebeat.com/business/tech-giants-commit-10m-annually-to-open-source-security-foundation/.
- ↑ danwillis (2023-05-12). "Cross-industry organisation OpenSSF snaps up $5m" (in en-GB). https://fintech.global/2023/05/12/cross-industry-organisation-openssf-snaps-up-5m/.
- ↑ Zorz, Mirko (2023-05-18). "Enhancing open source security: Insights from the OpenSSF on addressing key challenges" (in en-US). https://www.helpnetsecurity.com/2023/05/18/brian-behlendorf-openssf-open-source-security/.
- ↑ "OpenSSF Working Groups" (in en-US). https://openssf.org/community/openssf-working-groups/.
- ↑ Vizard, Mike (2022-10-27). "Sigstore Code Signing Service Becomes Generally Available" (in en-US). https://devops.com/sigstore-code-signing-service-becomes-generally-available/.
- ↑ Vaughan-Nichols, Steven J. (2022-10-06). "Alpha-Omega Dishes out Cash to Secure Open Source Projects" (in en-US). https://thenewstack.io/alpha-omega-dishes-out-cash-to-secure-open-source-projects/.
- ↑ House, The White (2022-01-14). "Readout of White House Meeting on Software Security" (in en-US). https://www.whitehouse.gov/briefing-room/statements-releases/2022/01/13/readout-of-white-house-meeting-on-software-security/.
- ↑ Vaughan-Nichols, Steven J. (2023-01-24). "OpenSSF Aimed to Stem Open Source Security Problems in 2022" (in en-US). https://thenewstack.io/openssf-aimed-to-stem-open-source-security-problems-in-2022/.
- ↑ Page, Carly (2022-05-16). "Tech giants pledge $$ to boost open source software security" (in en-US). https://techcrunch.com/2022/05/16/white-house-open-source-security/.
- ↑ "DARPA AI Cyber Challenge Aims to Secure Nation’s Most Critical Software". https://www.darpa.mil/news-events/2023-08-09.
- ↑ Vasquez, Christian (2023-09-13). "Washington summit grapples with securing open source software" (in en-US). https://cyberscoop.com/openssf-open-source-security-summit/.
External links
![]() | Original source: https://en.wikipedia.org/wiki/Open Source Security Foundation.
Read more |