Global Cooperation Needed to Enhance Open Source Software Security>
Info Security Magazine – James Coker
Greater international collaboration is needed in order to strengthen open source software security while retaining its benefits, was the sentiment highlighted by a panel of policymaker experts at the State of Open Con 23 conference, held in London, UK.
Work relating open sources software is already being undertaken by the US Federal government, noted Camille Stewart Gloster, deputy national cyber director, Office for National Cyber Director (ONCD) at the White House. This effort began with President Joe Biden’s zero trust executive order (EO) in May 2021, published in response to the SolarWinds supply chain attacks in late 2020.
An aspect of this EO was to better understand the products and companies within the federal government’s supply chain; for example, requirements for software vendors to provide a Software Bill of Materials (SBOM) as part of their federal procurement process.
However, the EO is “just the beginning” of federal government initiatives around open source, commented Stewart Gloster. The White House realises that “software is a key component in our supply chain.”
Link: https://www.infosecurity-magazine.com/news/global-cooperation-open-source/