{"id":103241,"date":"2022-02-07T21:36:39","date_gmt":"2022-02-07T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov"},"modified":"2022-02-07T21:36:39","modified_gmt":"2022-02-07T19:36:39","slug":"inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","title":{"rendered":"Ini\u021biativa Alpha-Omega, dedicat\u0103 \u00eembun\u0103t\u0103\u021birii securit\u0103\u021bii a 10.000 de proiecte open source","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Funda\u021bia OpenSSF (Open Source Security Foundation) a prezentat proiectul Alpha-Omega, destinat s\u0103 creasc\u0103 securitatea software-ului open source. Investi\u021biile ini\u021biale de dezvoltare a proiectului \u00een valoare de 5 milioane de dolari \u0219i personalul necesar pentru lansarea ini\u021biativei vor fi furnizate de companiile Google \u0219i Microsoft. De asemenea, sunt invitate alte organiza\u021bii s\u0103 participe, fie prin furnizarea de exper\u021bi ingineri, fie prin nivelul de finan\u021bare, ceea ce va ajuta la extinderea num\u0103rului de proiecte open source vizate de ini\u021biativ\u0103. \u00cen plus, la sf\u00e2r\u0219itul anului trecut, Funda\u021biei OpenSSF i-au fost alocate 10 milioane de dolari, dar nu se precizeaz\u0103 dac\u0103 aceste fonduri vor fi utilizate pentru ini\u021biativa Alpha-Omega.          <\/p>\n<p>Proiectul Alpha-Omega const\u0103 din dou\u0103 componente:   <\/p>\n<ul>\n<li class=\"l\"> Partea Alpha implic\u0103 desf\u0103\u0219urarea unui audit manual de securitate pentru 200 de proiecte open source foarte utilizate, cele mai populare din perspectiva utiliz\u0103rii lor ca dependen\u021be sau \u00een elemente de infrastructur\u0103. Lucr\u0103rile vor fi realizate \u00een colaborare cu dezvoltatorii \u0219i vor include o analiz\u0103 sistematic\u0103 a codului pentru identificarea de noi vulnerabilit\u0103\u021bi \u0219i corectarea rapid\u0103 a acestora.\n<li class=\"l\"> Partea Omega este axat\u0103 pe desf\u0103\u0219urarea test\u0103rii automate pentru cele mai populare 10.000 de proiecte open source. Pentru a efectua testarea, a \u00eembun\u0103t\u0103\u021bi metodele aplicate, a analiza rezultatele verific\u0103rii, a aduce informa\u021biile dezvoltatorilor de proiecte \u0219i a coordona colaborarea pentru remedierea problemelor critice, va fi creat\u0103 o echip\u0103 separat\u0103 de ingineri. Sarcina principal\u0103 a acestei echipe va fi eliminarea alarmelor false \u0219i identificarea \u00een rapoartele automate a vulnerabilit\u0103\u021bilor reale.      <\/ul>\n<p>Necesitatea auditului manual \u00een etapa Alpha este determinat\u0103 de necesitatea de a identifica probleme ascunse, care sunt dificil de descoperit \u00een timpul test\u0103rii automate. Printre problemele de acest tip se num\u0103r\u0103 recentele vulnerabilit\u0103\u021bi critice \u00een Log4j, care au pus \u00een pericol infrastructurile unui num\u0103r mare de companii mari. Proiectele pentru audit vor fi selectate av\u00e2nd \u00een vedere recomand\u0103rile comunit\u0103\u021bii exper\u021bilor \u0219i datele din clasific\u0103rile anterioare Critically Score \u0219i Census.      <\/p>\n<p>Reamintim c\u0103 Fondul OpenSSF a fost creat sub egida organiza\u021biei Linux Foundation \u0219i se concentreaz\u0103 pe activit\u0103\u021bi precum divulgarea coordonat\u0103 a informa\u021biilor despre vulnerabilit\u0103\u021bi, distribu\u021bia de corec\u021bii, dezvoltarea de instrumente pentru asigurarea securit\u0103\u021bii, publicarea celor mai bune practici pentru organizarea sigur\u0103 a dezvolt\u0103rii, identificarea amenin\u021b\u0103rilor legate de securitate \u00een software-ul open source, desf\u0103\u0219urarea de audituri \u0219i \u00eent\u0103rirea securit\u0103\u021bii proiectelor open source critice, precum \u0219i crearea de instrumente pentru verificarea identit\u0103\u021bii dezvoltatorilor. OpenSSF continu\u0103 s\u0103 dezvolte ini\u021biative precum Core Infrastructure Initiative \u0219i Open Source Security Coalition, reunind \u0219i alte lucr\u0103ri legate de securitate \u00eentreprinse de companiile care s-au al\u0103turat acestei ini\u021biative. Printre companiile fondatoare ale OpenSSF se num\u0103r\u0103 Google, Microsoft, Amazon, Cisco, Dell Technologies, Ericsson, Facebook, Fidelity, GitHub, IBM, Intel, JPMorgan Chase, Morgan Stanley, Oracle, Red Hat, Snyk \u0219i VMware.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56639\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e. \u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u044f\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Microsoft. \u041a \u0443\u0447\u0430\u0441\u0442\u0438\u044e \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0445 \u043a\u0430\u0434\u0440\u043e\u0432, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103241","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10 \u0442\u044b\u0441\u044f\u0447 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-02-07T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-02-07T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ini\u021biativa Alpha-Omega, dedicat\u0103 cre\u0219terii securit\u0103\u021bii a 10.000 de proiecte open source | ProHoster","description":"Fondul OpenSSF (Open Source Security Foundation) a prezentat proiectul Alpha-Omega, destinat s\u0103 \u00eembun\u0103t\u0103\u021beasc\u0103 securitatea software-ului open source.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10 \u0442\u044b\u0441\u044f\u0447 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-07T19:36:39+00:00","article:modified_time":"2022-02-07T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103241","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-07 19:37:41","updated":"2022-09-29 09:49:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=103241"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103241\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=103241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=103241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=103241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}