EU to fund bug bounty program for top open-source software

The European Union will help cover the expenses of bug bounty programs for 14 open-source projects according to an announcement made by EU Member of Parliament Julia Reda.

The projects that will receive funding for their bug bounty programs are 7-zip, Apache Kafka, Apache Tomcat, Digital Signature Services (DSS), Drupal, Filezilla, FLUX TL, the GNU C Library (glibc), KeePass, midPoint, Notepad++, PuTTY, the Symfony PHP framework, VLC Media Player and WSO2.

The bug bounty programs are being sponsored as part of the third edition of the Free and Open Source Software Audit (FOSSA) project.

FOSSA was first approved by EU authorities back in 2015 when security researchers discovered severe vulnerabilities in the OpenSSL library a year earlier.

Third edition of FOSSA

In her announcement, Julia Reda highlighted the importance of free and open-source software, saying:

"The issue made lots of people realise how important Free and Open Source Software is for the integrity and reliability of the Internet and other infrastructure. Like many other organisations, institutions like the European Parliament, the Council and the Commission build upon Free Software to run their websites and many other things."

The first edition of FOSSA ran between 2015 and 2016 with a budget of €1m and a public survey was held which decided that Apache HTTP web server and the KeePass password manager would receive a sponsored security audit.

FOSSA 2 had a budget of €2m but its bug bounty program was limited to €60,000 for the VLC Media Player app.

Beginning in January, security researchers and companies can hunt for vulnerabilities in the 14 open source projects chosen for FOSSA 3 and report them to earn a monetary award.

Via ZDNet



from TechRadar - All the latest technology news http://bit.ly/2GNeRMX

Comments

Post a Comment

Popular posts from this blog

F1 live stream: how to watch every 2021 Grand Prix online from anywhere

Image
The 2021 season is in full swing, but even after just four races we're already seeing a pattern emerging – will the winner be Verstappen or Hamilton? Well, we've got plenty of time to find out, as this year we've got a full house of 23 events, a welcome relief from last year's truncated calendar. Read on as our guide explains how to watch an F1 live stream online from all over the world - and where you can watch absolutely free! 2021 F1 live stream Season dates: March 28 - December 12 Next race: Monaco Grand Prix, Circuit de Monaco (May 23) Live streams: Sky Sports (UK) | ABC/ Sling TV (US) | Fox/ Kayo Sports (AU) | F1 TV (selected regions) Watch anywhere: try No. 1 overall VPN 100% risk-free In terms of positioning, last week's Spanish GP was much the same as the Portuguese GP before it, with Hamilton, Verstappen, and Bottas all gracing the podium in the same order for the second time - but that's not to say we were bored seeing it happen. Ver...
Read more

Best blogging sites of 2021: Free and paid blog platforms

Image
Best free blogging site 1. Wix 2. WordPress 3. Blogger 4. Weebly 5. Penzu Read on for our detailed analysis of each service Free blogging sites have come a long way in recent years, and it’s now easier than ever to create a professional-looking blog to share a hobby with like-minded people, express your opinions, and establish an online presence.  These free blogging sites are aimed at hobbyist bloggers – blogs are created and managed online, and hosted on the blogging platform’s own servers. If you want to create a self-hosted blog, the downloadable version of WordPress is an excellent option, with total flexibility, support for third-party plugins , and as much storage as your hosting plan allows. If you're interested in making a static website rather than an online journal, take a look at our guide to the best free website builders . Our advice would be to steer clear of free blogging sites if you can, as it isn't always a good option for the majority . How...
Read more

Tableau launches new enterprise plans, big data tools

The cloud analytics firm Tableau has unveiled a number of new data and analytics platform capabilities in addition to new enterprise subscription plans designed to help customers' digital transformation efforts. The Salesforce -owned company aims to empower everyone in an organization by giving them access to trusted and governed data at a time when 87 percent of IT and business leaders are concerned that security and governance are slowing the pace of innovation according to a new report from Mulesoft . Tableau's new enterprise subscription plans will also make it easier to procure and deploy its analytics platform across an entire organization. This is because the company has made the decision to bundle analytics with Data Management and Server Management. We've built a list of the best cloud analytics available These are the best cloud computing services on the market Also check out our roundup of the best online collaboration tools Chief product officer at...
Read more