US Government Studies Open Source Quality

anadgouda writes "US Department of Homeland Security has released a report on open source quality in an effort to study the security of open source. 31 popular open source packages were studied as part of this effort. From the article: 'Coverity's report, Stacking up the LAMP stack: a study of open source quality, was produced as part of a $1.24m, three-year DHS Science and Technology Directorate effort to evaluate and improve the security of open source.'"

Fan of Linux, not of Homeland Security

[toddbu]

I feel very conflicted by this report. On the one hand, I'm happy to see a report that favors open source. On the other hand, in the wake of the Katrina political fallout, it's difficult to say whether this report helps or hurts. The last thing LAMP needs right now is to get caught up in Brown/Chertoff/GWB affair. The only thing worse would be to have the UAE issue a similar report. :-)

stanford will keep the database public...

[hihihihi]

the report have a better coverage on this page: http://www.eweek.com/article2/0,1895,1909946,00.as p [eweek.com]

from this TFA:
"Anti-virus vendor Symantec Corp. is providing guidance as to where security gaps might be in certain open-source projects."

PS:i am not sure if it has been published on /. or not

Open Source Software: Opportunities and Challenges

[Old Duck]

An interesting study was done by the U.S. Military (the Airforce, I believe) concerning Open Source and it's place in the department of defense, though it is written in such a way to be useful to non-military personnel and applications. It is a similar, yet IMHO, a more interesting read than the parent.

The report can be found as a PDF at [af.mil]http://www.stsc.hill.af.mil/crosstalk/2005/01/0501 Tuma.pdf [af.mil]

Yes.

[Anonymous Coward]

I'm involved in one of the F/OSS projects that Coverity analyzed; and yes, they were co-operative with the dev team in sharing their insights.

Re:So,

[Anonymous Coward]

"Thank you for playing the grammar game, but please, understand what you're criticizing before you play again."

The correct spelling is expletive.
Sorry, YFI.