RSS feed source: USGS Earthquake Hazards Program

Synopsis

Vulnerabilities in an open-source product and/or its continuous development, integration and deployment infrastructure can potentially be exploited to attack any user (human, organization, and/or another product/entity) of the product. To respond to the growing threats to the safety, security, and privacy of open-source ecosystems (OSEs), NSF is launching the Safety, Security, and Privacy for Open-Source Ecosystems (Safe-OSE) program. This program solicits proposals from OSEs, including those not originally funded by NSF’s Pathways to Enable Open-Source Ecosystems (POSE) program, to address significant safety, security, and/or privacy vulnerabilities, both technical (e.g., vulnerabilities in code and side-channels) and socio-technical (e.g., supply chain, insider threats). 

Although most open-source products are software-based, it is important to note that Safe-OSE applies to any type of OSE, including those based on scientific methodologies, models, and processes; manufacturing processes and process specifications; materials formulations; programming languages and formats; hardware instruction sets; system designs or specifications;

Click this link to continue reading the article on the source website.

RSS feed source: USGS Earthquake Hazards Program

Synopsis

The Pathways to Enable Open-Source Ecosystems (POSE) program aims to harness the power of open-source development for the creation of new technology solutions to problems of national and societal importance. Many NSF-funded projects result in publicly accessible, modifiable, and distributable open-source products, including software, hardware, models, specifications, programming languages, or data platforms that catalyze further innovation. In some cases, an open-source product that shows potential for wide adoption forms the basis for a self-sustaining open-source ecosystem (OSE) that comprises a leadership team; a managing organization with a well-defined governance structure and distributed development model; a cohesive community of external intellectual content developers; and a broad base of users across academia, industry, and/or government. The overarching vision of POSE is that proactive and intentional formation of managing organizations will ensure adoption of open-source products; increased coordination of external intellectual content developer contributions; and a

Click this link to continue reading the article on the source website.