{"id":103241,"date":"2022-02-07T21:36:39","date_gmt":"2022-02-07T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov"},"modified":"2022-02-07T21:36:39","modified_gmt":"2022-02-07T19:36:39","slug":"inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","title":{"rendered":"A Iniciativa Alpha-Omega visa aumentar a seguran\u00e7a de 10 mil projetos de c\u00f3digo aberto.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>O Fundo OpenSSF (Open Source Security Foundation) apresentou o projeto Alpha-Omega, visando aumentar a seguran\u00e7a do software de c\u00f3digo aberto. Os investimentos iniciais para o desenvolvimento do projeto, no valor de 5 milh\u00f5es de d\u00f3lares, e a equipe para lan\u00e7ar a iniciativa ser\u00e3o fornecidos pelas empresas Google e Microsoft. Outras organiza\u00e7\u00f5es tamb\u00e9m est\u00e3o convidadas a participar, podendo contribuir tanto com profissionais de engenharia quanto em n\u00edvel de financiamento, o que ajudar\u00e1 a ampliar o n\u00famero de projetos abertos que ser\u00e3o abrangidos pela iniciativa. Al\u00e9m disso, no final do ano passado, foram alocados 10 milh\u00f5es de d\u00f3lares para o trabalho do Fundo OpenSSF, sem esclarecimentos sobre se esses recursos ser\u00e3o utilizados na iniciativa Alpha-Omega.          <\/p>\n<p>O projeto Alpha-Omega consiste em duas partes:   <\/p>\n<ul>\n<li class=\"l\"> A Parte Alpha envolve a realiza\u00e7\u00e3o de uma auditoria manual de seguran\u00e7a em 200 projetos abertos amplamente utilizados, os mais populares em termos de uso como depend\u00eancias ou em elementos de infraestrutura. O trabalho ser\u00e1 feito em colabora\u00e7\u00e3o com os mantenedores e incluir\u00e1 uma an\u00e1lise sistem\u00e1tica do c\u00f3digo para identificar novas vulnerabilidades e corrigi-las rapidamente.\n<li class=\"l\"> A Parte Omega est\u00e1 focada na realiza\u00e7\u00e3o de testes automatizados em 10 mil dos projetos abertos mais populares. Para a realiza\u00e7\u00e3o dos testes, aprimoramento dos m\u00e9todos aplicados, an\u00e1lise dos resultados verificados, comunica\u00e7\u00e3o das informa\u00e7\u00f5es aos desenvolvedores dos projetos e coordena\u00e7\u00e3o do trabalho conjunto para resolver problemas cr\u00edticos, ser\u00e1 criada uma equipe separada de engenheiros. A principal tarefa dessa equipe ser\u00e1 eliminar falsos positivos e identificar vulnerabilidades reais nos relat\u00f3rios automatizados.      <\/ul>\n<p>A necessidade da auditoria manual na fase Alpha se deve \u00e0 identifica\u00e7\u00e3o de problemas ocultos que s\u00e3o dif\u00edceis de detectar durante os testes automatizados. Como exemplo, citam-se as recentes vulnerabilidades cr\u00edticas no Log4j, que colocaram em risco a infraestrutura de muitas grandes empresas. Os projetos para auditoria ser\u00e3o selecionados com base nas recomenda\u00e7\u00f5es da comunidade de especialistas e em dados de classifica\u00e7\u00f5es previamente formadas, como Critically Score e Census.      <\/p>\n<p>Lembramos que o OpenSSF Foundation foi criado sob a \u00e9gide da Linux Foundation e se concentra em \u00e1reas como divulga\u00e7\u00e3o coordenada de informa\u00e7\u00f5es sobre vulnerabilidades, dissemina\u00e7\u00e3o de corre\u00e7\u00f5es, desenvolvimento de ferramentas de seguran\u00e7a, publica\u00e7\u00e3o de melhores pr\u00e1ticas para uma organiza\u00e7\u00e3o de desenvolvimento segura, identifica\u00e7\u00e3o de amea\u00e7as relacionadas \u00e0 seguran\u00e7a em software aberto, realiza\u00e7\u00e3o de auditorias e fortalecimento da seguran\u00e7a de projetos abertos cr\u00edticos, e cria\u00e7\u00e3o de meios para verifica\u00e7\u00e3o da identidade dos desenvolvedores. O OpenSSF continua a desenvolver iniciativas como a Core Infrastructure Initiative e a Open Source Security Coalition, al\u00e9m de reunir outros trabalhos relacionados \u00e0 seguran\u00e7a realizados pelas empresas participantes. Entre as empresas fundadoras do OpenSSF est\u00e3o Google, Microsoft, Amazon, Cisco, Dell Technologies, Ericsson, Facebook, Fidelity, GitHub, IBM, Intel, JPMorgan Chase, Morgan Stanley, Oracle, Red Hat, Snyk e VMware.<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56639\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e. \u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u044f\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Microsoft. \u041a \u0443\u0447\u0430\u0441\u0442\u0438\u044e \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0445 \u043a\u0430\u0434\u0440\u043e\u0432, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103241","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10 \u0442\u044b\u0441\u044f\u0447 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-02-07T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-02-07T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Iniciativa Alpha-Omega, dedicada a aumentar a seguran\u00e7a de 10 mil projetos abertos | ProHoster","description":"A OpenSSF (Open Source Security Foundation) apresentou o projeto Alpha-Omega, voltado para aumentar a seguran\u00e7a do software aberto.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10 \u0442\u044b\u0441\u044f\u0447 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-07T19:36:39+00:00","article:modified_time":"2022-02-07T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103241","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-07 19:37:41","updated":"2022-09-29 09:49:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/103241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=103241"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/103241\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=103241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=103241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=103241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}