{"id":103241,"date":"2022-02-07T21:36:39","date_gmt":"2022-02-07T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov"},"modified":"2022-02-07T21:36:39","modified_gmt":"2022-02-07T19:36:39","slug":"inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","title":{"rendered":"L'initiative Alpha-Omega vise \u00e0 am\u00e9liorer la s\u00e9curit\u00e9 de 10 000 projets open source","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Le fonds OpenSSF (Open Source Security Foundation) a pr\u00e9sent\u00e9 le projet Alpha-Omega, visant \u00e0 am\u00e9liorer la s\u00e9curit\u00e9 des logiciels open source. Un investissement initial de 5 millions de dollars et des \u00e9quipes pour lancer l'initiative seront fournis par Google et Microsoft. D'autres organisations sont \u00e9galement invit\u00e9es \u00e0 participer, que ce soit par la fourniture de personnel d'ing\u00e9nierie ou par financement, ce qui contribuera \u00e0 \u00e9largir le nombre de projets open source couverts par l'initiative. De plus, \u00e0 la fin de l'ann\u00e9e derni\u00e8re, 10 millions de dollars ont \u00e9t\u00e9 allou\u00e9s au travail du fonds OpenSSF, mais il n'est pas pr\u00e9cis\u00e9 si ces fonds seront utilis\u00e9s pour l'initiative Alpha-Omega.          <\/p>\n<p>Le projet Alpha-Omega se compose de deux volets :   <\/p>\n<ul>\n<li class=\"l\"> La partie Alpha implique un audit de s\u00e9curit\u00e9 manuel de 200 projets open source largement utilis\u00e9s, les plus populaires du point de vue de leur utilisation en tant que d\u00e9pendances ou dans des \u00e9l\u00e9ments d'infrastructure. Le travail se fera en collaboration avec les mainteneurs et inclura une analyse syst\u00e9matique du code pour identifier de nouvelles vuln\u00e9rabilit\u00e9s et les corriger rapidement.\n<li class=\"l\"> La partie Omega est ax\u00e9e sur la r\u00e9alisation de tests automatis\u00e9s de 10 000 projets open source les plus populaires. Pour r\u00e9aliser les tests, am\u00e9liorer les m\u00e9thodes utilis\u00e9es, analyser les r\u00e9sultats, informer les d\u00e9veloppeurs des projets et coordonner les efforts pour r\u00e9soudre les probl\u00e8mes critiques, une \u00e9quipe d'ing\u00e9nieurs sera constitu\u00e9e. La principale t\u00e2che de cette \u00e9quipe sera de filtrer les faux positifs et d'identifier dans les rapports automatis\u00e9s les vuln\u00e9rabilit\u00e9s r\u00e9elles.      <\/ul>\n<p>La n\u00e9cessit\u00e9 d'un audit manuel \u00e0 ce stade Alpha est due \u00e0 la n\u00e9cessit\u00e9 d'identifier des probl\u00e8mes cach\u00e9s, difficiles \u00e0 d\u00e9tecter lors de tests automatis\u00e9s. Des vuln\u00e9rabilit\u00e9s critiques r\u00e9centes dans Log4j, qui ont mis en p\u00e9ril les infrastructures de nombreuses grandes entreprises, sont cit\u00e9es en exemple. Les projets pour l'audit seront s\u00e9lectionn\u00e9s en tenant compte des recommandations de la communaut\u00e9 experte et des donn\u00e9es provenant de classements ant\u00e9rieurs tels que Critically Score et Census.      <\/p>\n<p>Rappelons que la Fondation OpenSSF a \u00e9t\u00e9 cr\u00e9\u00e9e sous l'\u00e9gide de l'organisation Linux Foundation et est ax\u00e9e sur des domaines tels que la divulgation coordonn\u00e9e des vuln\u00e9rabilit\u00e9s, la diffusion de correctifs, le d\u00e9veloppement d'outils de s\u00e9curit\u00e9, la publication de meilleures pratiques pour une organisation de d\u00e9veloppement s\u00e9curis\u00e9e, l'identification des menaces li\u00e9es \u00e0 la s\u00e9curit\u00e9 dans les logiciels open source, la r\u00e9alisation d'audits et le renforcement de la s\u00e9curit\u00e9 des projets open source critiques, ainsi que la cr\u00e9ation de moyens pour v\u00e9rifier l'identit\u00e9 des d\u00e9veloppeurs. OpenSSF continue de d\u00e9velopper des initiatives telles que la Core Infrastructure Initiative et la Open Source Security Coalition, ainsi que de rassembler d'autres travaux li\u00e9s \u00e0 la s\u00e9curit\u00e9 entrepris par les entreprises qui ont rejoint le projet. Parmi les entreprises fondatrices de OpenSSF figurent Google, Microsoft, Amazon, Cisco, Dell Technologies, Ericsson, Facebook, Fidelity, GitHub, IBM, Intel, JPMorgan Chase, Morgan Stanley, Oracle, Red Hat, Snyk et VMware.<br \/>\n<br \/>Source : <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56639\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e. \u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u044f\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Microsoft. \u041a \u0443\u0447\u0430\u0441\u0442\u0438\u044e \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0445 \u043a\u0430\u0434\u0440\u043e\u0432, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103241","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10 \u0442\u044b\u0441\u044f\u0447 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-02-07T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-02-07T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Initiative Alpha-Omega, visant \u00e0 am\u00e9liorer la s\u00e9curit\u00e9 de 10 000 projets open source | ProHoster","description":"La Fondation OpenSSF (Open Source Security Foundation) a pr\u00e9sent\u00e9 le projet Alpha-Omega, visant \u00e0 am\u00e9liorer la s\u00e9curit\u00e9 des logiciels open source.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10 \u0442\u044b\u0441\u044f\u0447 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-07T19:36:39+00:00","article:modified_time":"2022-02-07T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103241","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-07 19:37:41","updated":"2022-09-29 09:49:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/103241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=103241"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/103241\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=103241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=103241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=103241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}