Behind the scenes of open source software: trust and security in a business context

on YouTube ↗54m

" summary

Examines the business risks and trustworthiness of open source software using research by Linux Polska (co-funded by NCBiR). Describes the SCARM model and algorithm that combines CVSS vulnerability scoring, static source-code analysis, and contributor engagement analysis, and introduces SourceMation, a software distribution platform to help developers, security specialists, and IT managers choose FOSS.

AI-written summary · about

" chapters (5)

1. 0:00Introduction
2. 10:34Open source risks
3. 27:57Research and evaluation methods
4. 37:19SourceMation tool and benefits
5. 53:59Summary

" related talks

• 41mBack to Security Basics: Evaluating, Consuming, and Contributing Open Source...Katherine Druckman · SupplyChainSecurityCon @ Open Source Summit Europe 2024
• 40mSecurity: Why It _has_to Be Open SourceMike Bursell · Open Source Summit India 2026
• 35mOpen source security: Opportunity or oxymoron?Huzaifa Sidhpurwala · DevConf.CZ 2023
• 41mBack to Security Basics: Evaluating, Consuming, and Contributing Open Source...Katherine Druckman · Open Source Summit Europe 2024
• 44mNavigating Open Source and Open Standards for Better CybersecurityArnaud J Le Hors, Jeffrey Borek · OpenGovCon @ Open Source Summit North America 2023
• 41mManaging the risk and growth of using Open Source SoftwareJason Hammond · foss-north 2020
• 37mSecuring Open Source Through Threat ModelingAviv Sasson, Daniel Prizmant · Critical Software Summit @ Open Source Summit Japan 2022
• 27mHow Do You Trust Your Open Source Software?Naveen Srinivasan, Brian Russell · CloudNativeSecurityCon North America 2023