{"id":7601,"date":"2017-08-18T07:00:36","date_gmt":"2017-08-18T15:00:36","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=7601"},"modified":"2017-06-16T16:15:33","modified_gmt":"2017-06-17T00:15:33","slug":"open-source-survey-finds-that-there-is-a-lot-to-like-about-os-but-some-big-gotchas-especially-with-security","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/open-source-survey-finds-that-there-is-a-lot-to-like-about-os-but-some-big-gotchas-especially-with-security\/","title":{"rendered":"Open Source: Survey Finds that There is a Lot to Like about OS, but Some Big Gotchas, Especially with Security"},"content":{"rendered":"

Organizations are increasingly finding value in the use of open source, but they are slipping in their ability to effectively secure and manage the open source code that they use, according to a new study on Open Source by Black Duck<\/a>.<\/p>\n

Why are organizations using Open Source? \u00a0The Black Duck report found near unanimous agreement that Open Source provides easy access and cost savings. \u00a0Thousands of open source projects are simply a download away. \u00a084 percent of organizations said that \u00a0open source helps them to avoid vendor lock-in, and 67 percent said that they like the ability to review code and fix or customize it, as needed.<\/p>\n

There is a lot to like about Open Source, but there are also some things that you need to watch out for. \u00a0The Black Duck report said that “the effective management of open-source is not keeping pace with the increase in use.” \u00a0There is very little control or tracking in organizations for which open source projects they are using and how they are using them. \u00a0A major side effect of poor control over which open source projects are being used is that updates to open source projects are typically installed very infrequently, if ever.<\/p>\n

71 percent of organizations say that their use of open source in applications might be exposing them \u00a0to exploits, especially through applications that they have made available external to their organization. \u00a061 percent of organizations worry that their development teams either don’t have specific rules for managing open source software or, if they do have rules, they simply aren’t being followed.<\/p>\n

Lou Shipley<\/a>, Black Duck CEO,\u00a0said that<\/a> “today open source comprises 80% to 90% of the code in a modern application and the application layer is a primary target for hackers. This means that exploitation from known open source vulnerabilities represents the most significant application security risk most organizations face.”<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Organizations are increasingly finding value in the use of open source, but they are slipping in their ability to effectively secure and manage the open source code that they use, according to a new study on Open Source by Black…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24,31],"tags":[],"class_list":["post-7601","post","type-post","status-publish","format-standard","hentry","category-open-source","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/7601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=7601"}],"version-history":[{"count":4,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/7601\/revisions"}],"predecessor-version":[{"id":7606,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/7601\/revisions\/7606"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=7601"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=7601"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=7601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}