{"id":101492,"date":"2021-10-02T22:22:38","date_gmt":"2021-10-02T20:22:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-vydelil-million-dollarov-na-rabotu-po-povysheniyu-bezopasnosti-otkrytogo-po"},"modified":"2021-10-02T22:22:38","modified_gmt":"2021-10-02T20:22:38","slug":"google-vydelil-million-dollarov-na-rabotu-po-povysheniyu-bezopasnosti-otkrytogo-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/google-vydelil-million-dollarov-na-rabotu-po-povysheniyu-bezopasnosti-otkrytogo-po","title":{"rendered":"Google has allocated one million dollars to enhance the security of open-source software.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Google has launched the Secure Open Source (SOS) initiative, which will provide rewards for efforts to enhance the security of critical open source software. An initial million dollars has been allocated for these rewards, and if the initiative is deemed successful, further investment in the project will continue. <\/p>\n
The following rewards are available: <\/p>\n
\n
$10,000 and above \u2014 for implementing complex, significant, and long-term relevant improvements that provide protection against serious vulnerabilities in the code or infrastructure of open projects.\n
$5,000-$10,000 \u2014 for medium complexity improvements that positively impact security.\n
$1,000-$5,000 \u2014 for moderate complexity improvements that enhance security.\n
$505 \u2014 for small enhancements that strengthen security. <\/ul>\n
Applications for rewards are accepted only for changes made to projects with a criticality rating of no less than 0.6 on the OpenSSF Criticality Score or those listed as requiring special security review. The nature of the proposed changes should be related to improving security in areas such as enhancing the protection of infrastructure elements (e.g., continuous integration and release deployment processes), implementing verification systems with digital signatures for software product components, and increasing product security (code reviews, branch protection, fuzz testing, and dependency attack protection). \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"