The percentage of open source code in proprietary apps is rising

guest · May 22, 2018

The percentage of open source code in proprietary apps is rising
May 22, 2018
https://www.helpnetsecurity.com/2018/05/22/open-source-code-security-risk/

The number of open source components in the codebase of proprietary applications keeps rising and with it the risk of those apps being compromised by attackers leveraging vulnerabilities in them, a recent report has shown.
[...] open source lowers development costs, speeds time to market, and accelerates innovation and developer productivity,” analysts with the Synopsys Center for Open Source Research & Innovation (COSRI) have noted.

With over 80 percent of all cyber attacks happen at the application level, fixing known vulnerabilities in both commercial and internal applications should be of extreme importance to enterprises and other organizations.

The analysts found that 78% of the codebases examined contained at least one vulnerability, with an average 64 vulnerabilities per codebase.
Open source and security
Over 54% of the vulnerabilities the auditors found in the codebases are considered high-risk vulnerabilities, i.e. they are easily exploited. Also, 17% of the codebases contained a highly publicized, “named” vulnerability such as Heartbleed, Logjam, Freak, Drown, and Poodle. [...] “The debate over whether open source should be used is moot. Today, most application code demonstrably is open source,” [...]
Click to expand...

Log in or Sign up

The percentage of open source code in proprietary apps is rising

guest Guest

Log in or Sign up

The percentage of open source code in proprietary apps is rising

guest Guest

Useful Searches