Sign Up for Our Newsletter
Donate

Archive

Open-Source Software Security Initiative

Towards securing the open-source software ecosystem

 

Open-source software is the structural building block for the digital infrastructure that supports the modern world. At IST, we believe it is of the utmost importance to develop an approach that anticipates vulnerabilities and other risks such as malicious code before they impact the entire Internet infrastructure.

Project page
IST’s Open-Source Software Security Initiative Submits Response to Request for Information 

Blog

IST’s Open-Source Software Security Initiative Submits Response to Request for Information 

This week, the IST team submitted a response to a request for information (RFI) from the Office of the National Cyber Director (ONCD), the Cybersecurity Infrastructure Security Agency (CISA), the National Science Foundation (NSF), the Defense Advanced Research Projects Agency (DARPA), and the Office of Management and Budget (OMB) on areas of long-term focus and prioritization in open-source software security. 
AI, market incentives, ONCD, open source software, RFI, secure-by-design
October 11, 2023
Castles Built on Sand: Digging into the Foundation | Towards Securing the Open-Source Software Ecosystem

Event

July 18, 2023 3:00 pm

Castles Built on Sand: Digging into the Foundation | Towards Securing the Open-Source Software Ecosystem

On July 18, 2023 Politico’s John Sakellariadis moderated a conversation with the authors of Castles Built on Sand to dig into the foundation of our recommendations to secure the open-source software ecosystem.
Log4j, open source software, software security, vulnerability management
July 18, 2023
Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Report

Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Castles Built on Sand advocates for a fundamental shift in the open-source software ecosystem. Taking the Log4j vulnerability as a case study, the paper seeks to understand the documentation of its development, the transparent response and mitigation efforts at each stage of the disclosure cycle, and its ongoing exploitation.
cybersecurity, Log4j, open source software, vulnerability management
April 17, 2023
IST announces new support from Omidyar Network to develop a framework for a secure open-source software ecosystem

Blog

IST announces new support from Omidyar Network to develop a framework for a secure open-source software ecosystem

Through a partnership with Omidyar Network, a social change venture that works to reimagine critical systems and the ideas that govern them, IST will work to develop a framework for securing the open-source software ecosystem.
announcements, digital infrastructure, open-source, software
January 23, 2023
MENU

HOME PAGE

GET IN TOUCH

Email: [email protected]
Send us a message: Contact

JOIN THE CATALINK MAILING LIST