From 4c39bfe8473b70767bd3b7fce731caadb368a266 Mon Sep 17 00:00:00 2001 From: Divyank Katira Date: Mon, 29 May 2023 13:44:33 +0530 Subject: [PATCH] Add new resources to OSS security project --- ...-ramifications-of-open-source-software.mdx | 20 +++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/projects/security-ramifications-of-open-source-software.mdx b/projects/security-ramifications-of-open-source-software.mdx index 2196d38..c065236 100644 --- a/projects/security-ramifications-of-open-source-software.mdx +++ b/projects/security-ramifications-of-open-source-software.mdx @@ -41,20 +41,28 @@ export const team = [ }, ]; - + { + title: + "Security of Open Source Software : A Survey of Technical Stakeholders’ Perceptions and Actions", + link: "https://cis-india.org/openness/security-of-open-source-software-a-survey-of-technical-stakeholders2019-perceptions-and-actions-1", + linkText: "Read More", + author: "Divyansha Sehgal", + }, +]; -# Security Ramifications for Open Source Software +# Security Ramifications of Open Source Software How do technical decision-makers assess the security ramifications of open source software components before adopting them in their projects and where can systemic interventions to the FOSS ecosystem be targeted to collectively improve its security? -Security is a critical part of the often overlooked area of open source software maintenance. While the benefits of FOSS are well recognized, there is no widespread understanding of the security tradeoffs of pervasive software reuse. +Security is a critical part of the often overlooked area of open-source software maintenance. While the benefits of FOSS are well recognized, there is no widespread understanding of the security tradeoffs of pervasive software reuse. This project will use a mix of qualitative research to examine attitudes of technical decision-makers towards the security of FOSS components, and empirical analysis to study their security failures at an infrastructural level to identify and proactively respond to systemic issues in the FOSS ecosystem.