Google has announced financial backing for the Secure Open Source (SOS) pilot program run by the Linux Foundation. The program was set up to reward innovative developers for adding to the security of critical open source projects. Google is starting with a $1 million investment, and plans to expand the scope of the program based on community feedback.
SOS rewards a range of improvements that are considered to toughen up critical open source projects and support infrastructure against application and supply chain attacks. In choosing winners, it will consider guidelines established by the National Institute of Standards and Technology’s definition in response to the recent Executive Order on Cybersecurity.
Criteria will include the following questions: How many and what types of users will be affected by the security improvements? Will the improvements have a significant impact on infrastructure and user security? If the project were compromised, how serious or wide-reaching would the implications be?
Over the past year the Google Open Source Security Team (GOSST) has made a number of investments on the security side of open source projects, including a $10 billion commitment to cybersecurity defence and $100 million to support third-party foundations that manage open source security priorities and help fix vulnerabilities.
Responses