Open Source software is almost present everywhere you go on the internet or anything that involves digital connections. Everyone uses it, and it is now a part of their daily routine. However, something that is so abundantly available does raise a few questions regarding its security. A recently released report looks into the said matter.
The researchers dive into the security risks that are put forward by open-source readily available on the market. It encompasses the vulnerabilities, licensing issues, and dangers of open Source. Why was open-source of particular importance to the researchers at Synopsys? The report provides fascinating insights into open-source security threats. It states that Open Source is the foundation of many software built today. No matter what their scale, industries are using open source for everyday business. The security risks that come with the unmanaged open Source are passed down to whatever is built on top of it.
Open Source that is outdated remains in use to this day. The reports point out the highly vulnerable Log4j versions that are present and are in constant use. Looking at the numbers, 2097 codebases were examined, and out of them, almost 85% were making use of components that are labeled as outdated today. Around 88% used parts that are not the latest version and pose security risks. Lastly, almost 5% were reported to contain the Log5j version, which is a security risk.
How can one deal with the risks posed by open sources? Reportedly, open sources vulnerabilities are decreasing, as shown by assessed codebases. Security and risk assessments were run on almost 2097 assessed codebases. This leads to a shocking decrease in any vulnerabilities that are present in open sources. Moreover, a decrease of nearly 11% was reported in audited code bases that included at least security vulnerability. The number this year is locked in at 49%. OSSRA reported a decrease of almost 3% in open source vulnerabilities. About 81% of assessed codebases were analyzed for this statistic.
The report also looks into any licensing conflicts that come with open source. They were reported to decrease to 53% from 65% in 2020. It is predicted that the licensing disputes will continue to fall. Over 20% of assessed codebases came with no licensing at all. If one was found, it was reported to be a customizable license. Basically, licensing allows you the right to use a particular product commercially. No permits can ultimately pose a legal risk. It can be challenging to carry out legal evaluations since these are available to everyone everywhere.
The complete analysis suggests that these can entail security plus legal threats due to multiple vulnerabilities and licensing issues. However, the licensing case can be argued for. Still, when it comes to using outdated components as a foundation, it can quickly be forgotten and become a significant threat.
Read next: This New Research Shows that Paying Ransoms Doesn’t Always Solve Ransomware Attacks
The researchers dive into the security risks that are put forward by open-source readily available on the market. It encompasses the vulnerabilities, licensing issues, and dangers of open Source. Why was open-source of particular importance to the researchers at Synopsys? The report provides fascinating insights into open-source security threats. It states that Open Source is the foundation of many software built today. No matter what their scale, industries are using open source for everyday business. The security risks that come with the unmanaged open Source are passed down to whatever is built on top of it.
Open Source that is outdated remains in use to this day. The reports point out the highly vulnerable Log4j versions that are present and are in constant use. Looking at the numbers, 2097 codebases were examined, and out of them, almost 85% were making use of components that are labeled as outdated today. Around 88% used parts that are not the latest version and pose security risks. Lastly, almost 5% were reported to contain the Log5j version, which is a security risk.
How can one deal with the risks posed by open sources? Reportedly, open sources vulnerabilities are decreasing, as shown by assessed codebases. Security and risk assessments were run on almost 2097 assessed codebases. This leads to a shocking decrease in any vulnerabilities that are present in open sources. Moreover, a decrease of nearly 11% was reported in audited code bases that included at least security vulnerability. The number this year is locked in at 49%. OSSRA reported a decrease of almost 3% in open source vulnerabilities. About 81% of assessed codebases were analyzed for this statistic.
The report also looks into any licensing conflicts that come with open source. They were reported to decrease to 53% from 65% in 2020. It is predicted that the licensing disputes will continue to fall. Over 20% of assessed codebases came with no licensing at all. If one was found, it was reported to be a customizable license. Basically, licensing allows you the right to use a particular product commercially. No permits can ultimately pose a legal risk. It can be challenging to carry out legal evaluations since these are available to everyone everywhere.
The complete analysis suggests that these can entail security plus legal threats due to multiple vulnerabilities and licensing issues. However, the licensing case can be argued for. Still, when it comes to using outdated components as a foundation, it can quickly be forgotten and become a significant threat.
