Open-Source Software Security Challenges and Policies for Cloud Enterprises

Abstract

Cloud computing stimulated the development of agile software. The new oil is software. More than 70-90% of the software is open-source, and its usage is inevitable. Open source encourages innovation through collaboration, reduces Time-To-Market, and fuels breakthrough technologies from the past few decades. In a way, open source is eating software or driving the Software world. Open source communities involve more contributors /developers, sometimes posing substantial security challenges. Recently, we have witnessed SolarWinds compromising the entire supply chain, Log4j allowing access to execute code with critical zero-day vulnerability remotely. The digital universe paused because these zero-day vulnerabilities exploded as an outcome. In this work, we will highlight challenges and propose an approach to help organisations protect the code base by safely consuming the Open Source.