Openness Main

by Ben Bas last modified Nov 21, 2011 10:39 AM
Security of Open Source Software : A Survey of Technical Stakeholders’ Perceptions and Actions

Security of Open Source Software : A Survey of Technical Stakeholders’ Perceptions and Actions

Posted by Divyansha Sehgal at Apr 13, 2023 06:01 AM |
Filed under:

Open-source software (OSS) components are largely assumed to be secure due to their open nature. However, that is not always the case. Of late, there has been an increased incidence of software supply-chain issues, with some industry reports estimating a 300% increase in attacks that exploit existing vulnerabilities between 2020 and 2021.
This report by Centre for Internet and Society surveys technical stakeholders to determine how they select OSS components to use in their projects and how they think broadly about the security of the projects they create.

Highlights:

  • 90% of respondents work in companies with a dedicated team responsible for the security of software. 80% of them do not carry out any further security checks on an OSS once it has been approved for use by their security teams.
  • 80% of respondents see comprehensive documentation as an important factor when selecting an OSS for use.
  • 70% of respondents report validating dependencies in their selected open-source software component.
  • 50% of respondents consider how actively an open-source software is maintained before selecting it for their projects.
  • 40% of respondents do not anticipate accidental exploitation of vulnerabilities or expect malice from bad actors when they create software.
  • 30% of respondents report not doing any post-release maintenance on the OSS component used and deployed.
 

Click to download the full report

Securing Our Dependence on Code Reuse in Software

Securing Our Dependence on Code Reuse in Software

Posted by Divyank Katira at Apr 13, 2023 12:00 AM |
Filed under:

Dividing and breaking up a software project into smaller modules with functionality that can be reused to build other software is an increasingly common practice in software development today. We examine our infrastructural dependence on reuse of open-source software (OSS) components, examine the unique security risks posed by the widespread reuse of code, and survey systemic solutions to securing code reuse.

Read More…

Open Data and Land Ownership

Posted by Sumandro Chattapadhyay at May 22, 2019 11:30 AM |
Filed under: , ,

In this chapter of the recently published volume on State of Open Data, Tim Davies and Sumandro Chattapadhyay discuss how the lessons from the land ownership field highlight the political nature of data, and illustrate the importance of politically aware interventions when creating open data standards, infrastructure, and ecosystems. State of Open Data, edited by Tim Davies, Stephen B. Walker, Mor Rubinstein, and Fernando Perini, is published by African Minds and International Development Research Centre, Canada.

Read More…

Sunil Abraham - Key Listener Speech at Wikimedia Summit 2019

Posted by Sunil Abraham at May 04, 2019 03:35 AM |
Filed under: ,

The Wikimedia Summit 2019 – formerly known as "Wikimedia Conference" or "Chapters Meeting" – took place on 29–31 March 2019 in Berlin. Sunil Abraham made a speech at the summit organized in Berlin.

Read More…

On World Water Day - Open Data for Water Resources

Lack of open data for researchers and activists is a key barrier against ensuring access to water and planning for sustainable management of water resources. In a collaboration between DataMeet and CIS, supported by Arghyam, we are exploring the early steps for making open data and tools to plan for water resources accessible to all. To celebrate the World Water Day 2018, we are sharing what we have been working on in the past few months - a paper on open data for water studies in India, and a web app to make open water data easily explorable and usable. Craig Dsouza led this collaboration, and authored this post.

Read More…

Open Data and Land Ownership - Environment Scan

Posted by Sumandro Chattapadhyay at Feb 12, 2018 10:30 AM |

The State of Open Data is an ambitious research project reflecting on 10 years of action on open data and providing a critical review of the current state of the open data movement across a range of issues and thematic areas. This environment scan represents the first step in gathering information to support a review of the state of open data with regard to land ownership, and in refining the focus of a chapter. The lead author for this chapter is Sumandro Chattapadhyay.

Read More…

Steps towards Integrated Open Water Data

Multiplicity of data collection agencies, formats, and disclosure practices and conditionalities make it very difficult to access interoperable and open data about water resources and systems in India. Barriers to accessing water data impede not only academic and applied research on related topics but also public consumption of information and critical decision making. DataMeet and CIS are proud to collaborate on identifying and addressing the challenges to open up and integrate data and information in the water sector. Supported by a generous grant from Arghyam, we are undertaking an initial study of open water data resources in India and taking first steps towards developing a Free and Open Source data portal for water resources information in India. Here is an initial note about the project. The key leaders and contributors of this project are Craig Dsouza, Namita Bhatawdekar, Riddhi Munde, and Jinda Sandbhor, all of whom are members of the Pune Chapter of DataMeet.

Read More…

Praja - Enhancing Democracy Through Access to Open Data: What Are the Roles of Government and Civil Society? (Delhi, Sep 08)

Open Government Data (OGD) is widely seen to be a key hallmark of contemporary democratic practice and is often linked to the passing of freedom of information legislation. OGD is a philosophy—and increasingly a set of policies—that promotes transparency, accountability and value creation by making government data available to all. Public bodies produce and commission huge quantities of data and information. By making their datasets available, public institutions become more transparent and accountable to citizens. By encouraging the use, reuse and free distribution of datasets, governments promote business creation and innovative, citizen-centric services. Praja is organising a symposium on "open data and civil society" on Friday, Sep 8, which is supported by European Union and Friedrich Naumann Stiftung fur die Freiheit. Sumandro Chattapadhyay (Research Director) will take part in this event as a speaker in the session on "data centric approach and role of stakeholders in the urban governance ecosystem."

Read More…

SoI’s Open Series Maps Fails to Implement Public Sharing of Govt Data

Posted by Sumandro Chattapadhyay at May 04, 2017 12:19 PM |

Although it has made the topographic maps or the Open Series Maps available to general public, Survey of India’s (SoI) Nakshe portal will have to go through a variety of litmus test, as the initiative fails to implement the mandates of public sharing of government data using open standards and open license as put forward by the NMP 2005 and NDSAP 2012, says Sumandro Chattapadhyay, Research Director, The Centre for Internet and Society. This interview was published by Geospatial World on May 02, 2017.

Read More…

Comments on the Right to Information Rules, 2017

Posted by Amber Sinha at Apr 27, 2017 09:25 AM |
Filed under: , ,

On March 31st, 2017, the Ministry of Personnel, Public Grievances and Pensions, Department of Personnel and Training released a Circular framing rules under the Right to Information Act, 2005 (“RTI Rules”). The Ministry invited comments on on the RTI Rules. CIS submitted its comments on April 25, 2017.

Read More…

Economic, Social and Cultural Rights in India: Opportunities for Advocacy in Intellectual Property

Economic, Social and Cultural Rights in India: Opportunities for Advocacy in Intellectual Property

Posted by Sunil Abraham and Vidushi Marda at Apr 23, 2017 05:22 AM |
Filed under: , , ,

Centre for Internet & Society worked on a three part case study. The first case study on digital protection of traditional knowledge was published by GIS Watch in December 2016. The other two case studies along with the synthesis overview has also been published.

Read More…

CBGA - Consultation on Opening Up Access to Budget Data in India (Delhi, January 27)

Posted by Sumandro Chattapadhyay at Jan 27, 2017 05:15 AM |

Open Budgets India, a comprehensive and user-friendly open data portal to provide free, easy, and timely access to relevant data on budgets, has been developed by the Centre for Budget and Governance Accountability (CBGA) in collaboration with a number of other organisations. CBGA is organising a Consultation on “Opening Up the Access to Budget Data in India” on Friday, January 27, 2017, to launch the beta version of the portal. Sumandro Chattapadhyay will be a speaker in the panel discussion that will follow the launch.

Read More…

4 tips for DIY makers

Posted by Subhashish Panigrahi at Nov 22, 2016 02:36 AM |

I started learning stencil printing and hand lettering this year, and became quite enthralled with it. These age old techniques really add something special to postcards, which I usually send to myself, my wife, and my friends while traveling.

Read More…

Kannada Wikipedia Education Program at Christ university: Work so far

Kannada Wikipedia Education Program at Christ university: Work so far

Posted by Ananth Subray at Oct 30, 2016 12:00 PM |

As you know we are working closely with Christ university in Bengaluru for the Education Programs in Kannada Wikipedia and Kannada Wikisource, we worked on redesigning the programme for this academic year 2016-17 based on the lessons learned from the earlier intervention.

Read More…

Should Indian Researchers Pay to Get their Work Published

Posted by Muthu Madhan, Siva Shankar Kimidi, Subbiah Gunasekaran and Subbiah Arunachalam at Oct 29, 2016 02:50 PM |

We raise the financial and ethical issue of paying for getting papers published in professional journals. Indian researchers have published more than 37,000 papers in over 880 open access journals from 61 countries in the five years 2010-14 as seen from Science Citation Index Expanded. This accounts for about 14.4% of India’s overall publication output, considerably higher than the 11.6% from the world. Indian authors have used 488 OA journals levying article processing charge (APC), ranging from INR 500 to US$5,000, in the five years to publish about 15,400 papers.

Read More…

Adopting ORCID as a Unique Identifier will Benefit all Involved in Scholarly Communication

Posted by Subbiah Arunachalam and Muthu Madhan at Oct 28, 2016 04:28 PM |

ORCID, the Open Researcher and Contributor ID, is a nonprofit, community-driven effort to create and maintain a registry of unique researcher identifiers and a transparent method of linking research activities and outputs to these identifiers. Together with other persistent identifiers for scholarly works such as digital object identifiers (DOIs) and identifiers for organizations, ORCID makes research more discoverable.

Read More…

Open source in everyday life: How we celebrated the Software Freedom Day in Bengaluru

Posted by Subhashish Panigrahi at Oct 27, 2016 01:07 AM |
Filed under: , ,

The free and open source software (FOSS) enthusiasts just celebrated the Software Freedom Day (SFD) on September 17 all across the world. This year, a small group of six of us gathered to celebrate SFD in the Indian city of Bengaluru. The group consisted of open source contributors from communities such as Mozilla, Wikimedia, Mediawiki, Open Street Map, and users of FOSS solutions.

Read More…

Why Open Access Has To Look Up For Academic Publishing To Look Up

Why Open Access Has To Look Up For Academic Publishing To Look Up

Posted by Anubha Sinha at Oct 12, 2016 04:22 PM |
Filed under: ,

In an important development, the US Federal Trade Commission has filed a complaint against the India-based OMICS group for harassing authors to publish in its journals.

Read More…

How we celebrated Software Freedom Day

How we celebrated Software Freedom Day

Posted by Subhashish Panigrahi at Oct 07, 2016 12:55 AM |
Filed under: , ,

A small group of 6 FOSS contributors from communities such as Mozilla, Wikimedia, Mediawiki, Open Street Map and users of FOSS solutions gathered in Bengaluru to celebrate Software Freedom Day. Subhashish Panigrahi who was a part of the event, reports the developments.

Read More…

Software Freedom Day: The Importance of Free and Open Source Software

Software Freedom Day: The Importance of Free and Open Source Software

Posted by Subhashish Panigrahi at Sep 18, 2016 03:46 AM |

Software Freedom Day (SFD) on September 17 celebrates the liberty that free and open software and the philosophy of freedom brings into people’s lives. When SFD was started in 2004, only 12 teams from different places joined. It grew to a whooping 1000 by 2010 across the world. Explaining the aim of the celebration, SFD’s official website says,

Read More…

Document Actions