Security News > 2022 > November > Following Log4j: Supporting the developer community to secure IT

While some security teams are beginning to assess their own open-source security by implementing SBOMs, many businesses are considering ditching open-source software altogether.

Instead of reluctantly using open source and blaming developers when something goes wrong, businesses should be working with the open-source community with the aim of improving security and working to minimize the fallout from the next vulnerability.

Open-source projects are everywhere, meaning there is no quick fix to the problem of open-source security.

The lesson for CSOs isn't that open source lacks security but rather that they should have a greater appreciation for the developer community and ask themselves how they can support the development of open source to the extent that when the next vulnerability appears, the time to deliver patches is as short as possible.

Invest in the community: Many free open-source projects are managed by a single person with a few interested community members.

In addition to benefiting the business, open-source engagement improves developer morale and performance.

News URL

https://www.helpnetsecurity.com/2022/11/01/open-source-projects/