MOSS/Secure Open Source: Difference between revisions

← Older edit

MOSS/Secure Open Source (view source)

Revision as of 17:15, 10 June 2016

46 bytes added , 10 June 2016

m

→‎FAQ

Mchris

Confirmed users

130

edits

Revision as of 23:19, 9 June 2016 (view source) Mchris (talk \| contribs) (adding comparison to CII) ← Older edit		Latest revision as of 17:15, 10 June 2016 (view source) Mchris (talk \| contribs) m (→‎FAQ)
Line 32:		Line 32:
	==FAQ==		==FAQ==

	We've been asked how this project compares to the [https://www.coreinfrastructure.org/ Core Infrastructure Initiative] of the Linux Foundation. Here's a short answer: We believe our model of support is different from and complementary to CII's. We view CII as focused on necessary, deeper-dive investments into the core OS security infrastructure, like in OpenSSL. This is important work. Focusing on more point-in-time solutions, the SOS Fund's audit and remediation methodology targets a different class of OSS projects with lower-hanging fruit security needs. To have substantial and lasting benefit in tackling such a significant issue as open source security, we need a broad range of solutions, including investment, audits, education, best practices, and a host of others. We believe the SOS Fund, alongside CII and other efforts, can help catalyze industry momentum to strengthen open source security.		We've been asked how this project compares to the [https://www.coreinfrastructure.org/ Core Infrastructure Initiative] of the Linux Foundation. Here's a short answer: We believe our model of support is different from and complementary to CII's. We view CII as focused on necessary, deeper-dive investments into the core OS security infrastructure, like in OpenSSL. This is important work. Focusing on more point-in-time solutions, the SOS Fund's audit and remediation methodology targets a different class of OSS projects with lower-hanging fruit security needs, using an open public-facing application form. To have substantial and lasting benefit in tackling such a significant issue as open source security, we need a broad range of solutions, including investment, audits, education, best practices, and a host of others. We believe the SOS Fund, alongside CII and other efforts, can help catalyze industry momentum to strengthen open source security.