OpenSSF (Open Source Security Foundation) tau qhia txog Alpha-Omega project, tsom rau kev txhim kho kev ruaj ntseg ntawm qhib qhov software. Kev nqis peev thawj zaug rau kev txhim kho qhov project hauv qhov nyiaj ntawm $ 5 lab thiab cov neeg ua haujlwm los tsim cov phiaj xwm yuav muab los ntawm Google thiab Microsoft. Lwm lub koom haum kuj raug txhawb kom koom nrog, ob qho tib si los ntawm kev muab cov txuj ci engineering thiab ntawm qib nyiaj txiag, uas yuav pab nthuav cov xov tooj qhib qhov project uas yuav tau them los ntawm kev pib. Tsis tas li ntawd, thaum kawg ntawm xyoo tas los, $ 10 lab tau faib rau kev ua haujlwm ntawm OpenSSF Foundation; seb cov nyiaj no puas yuav raug siv rau Alpha-Omega teg num tsis tau teev tseg.
Qhov project Alpha-Omega muaj ob yam:
- Ib feem ntawm Alpha cuam tshuam nrog kev soj ntsuam kev ruaj ntseg ntawm 200 qhov kev siv dav dav qhib qhov project, nrov tshaj plaws rau lawv siv nyob rau hauv daim ntawv ntawm kev vam khom lossis cov ntsiab lus hauv vaj tse. Kev ua haujlwm yuav tau ua nrog kev koom tes nrog cov neeg saib xyuas thiab yuav suav nrog kev tshuaj xyuas cov cai los txheeb xyuas qhov tsis zoo tshiab thiab kho sai sai.
- Ib feem ntawm Omega tau tsom mus rau kev ua qhov kev sim ntsuas ntawm 10 txhiab qhov nrov tshaj plaws qhib qhov project. Ib pab neeg ua haujlwm sib cais yuav raug tsim los ua kev sim, txhim kho cov txheej txheem siv, txheeb xyuas cov txiaj ntsig kev xeem, sib txuas lus cov ntaub ntawv rau cov neeg tsim khoom thiab sib koom ua ke los daws cov teeb meem tseem ceeb. Lub luag haujlwm tseem ceeb ntawm pab pawg no yuav tsis lees paub qhov tsis zoo thiab txheeb xyuas qhov tsis muaj peev xwm tiag tiag hauv cov ntaub ntawv tsis siv neeg.
Qhov kev xav tau ntawm kev tshawb xyuas phau ntawv ntawm Alpha theem yog vim qhov xav tau los txheeb xyuas cov teeb meem zais uas muaj teeb meem los txheeb xyuas thaum lub sijhawm ntsuas kev siv tshuab. Raws li ib qho piv txwv ntawm cov teeb meem no, tsis ntev los no tseem ceeb heev vulnerabilities nyob rau hauv Log4j tau hais, uas jeopardized lub infrastructure ntawm ib tug loj tus naj npawb ntawm cov tuam txhab loj. Cov haujlwm rau kev tshuaj xyuas yuav raug xaiv los ntawm cov lus pom zoo ntawm cov kws tshaj lij hauv zej zog thiab cov ntaub ntawv los ntawm cov qhab nia tseem ceeb thiab kev suav pej xeem yav dhau los.
Raws li kev ceeb toom, OpenSSF tau tsim nyob rau hauv kev txhawb nqa ntawm Linux Foundation thiab tau tsom mus rau kev ua haujlwm hauv thaj chaw xws li kev sib koom ua haujlwm tsis zoo, kev faib tawm thaj, kev txhim kho cov cuab yeej ruaj ntseg, tshaj tawm cov kev coj ua zoo tshaj plaws rau kev txhim kho kev ruaj ntseg, txheeb xyuas kev nyab xeeb hauv kev qhib Software, ua haujlwm ntawm kev tshuaj xyuas thiab ntxiv dag zog rau kev ruaj ntseg ntawm cov haujlwm qhib qhov tseem ceeb, tsim cov cuab yeej los txheeb xyuas tus kheej ntawm cov neeg tsim khoom. OpenSSF tseem tab tom tsim cov phiaj xwm xws li Core Infrastructure Initiative thiab Open Source Security Coalition, thiab tseem koom nrog lwm cov haujlwm ntsig txog kev nyab xeeb uas tau ua los ntawm cov tuam txhab uas tau koom nrog txoj haujlwm. OpenSSF cov tuam txhab tsim muaj xws li Google, Microsoft, Amazon, Cisco, Dell Technologies, Ericsson, Facebook, Fidelity, GitHub, IBM, Intel, JPMorgan Chase, Morgan Stanley, Oracle, Red Hat, Snyk thiab VMware.
Tau qhov twg los: opennet.ru