{"id":103241,"date":"2022-02-07T21:36:39","date_gmt":"2022-02-07T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov"},"modified":"2022-02-07T21:36:39","modified_gmt":"2022-02-07T19:36:39","slug":"inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","title":{"rendered":"Iniciat\u00edva Alpha-Omega zameran\u00e1 na zv\u00fd\u0161enie zabezpe\u010denia 10 000 otvoren\u00fdch projektov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Fond OpenSSF (Open Source Security Foundation) predstavil projekt Alpha-Omega, zameran\u00fd na zv\u00fd\u0161enie bezpe\u010dnosti otvoren\u00e9ho softv\u00e9ru. Po\u010diato\u010dn\u00e9 invest\u00edcie vo v\u00fd\u0161ke 5 mili\u00f3nov dol\u00e1rov a person\u00e1l na spustenie iniciat\u00edvy poskytn\u00fa spolo\u010dnosti Google a Microsoft. Na \u00fa\u010das\u0165 sa taktie\u017e poz\u00fdvaj\u00fa \u010fal\u0161ie organiz\u00e1cie, ktor\u00e9 m\u00f4\u017eu prispie\u0165 bu\u010f poskytovan\u00edm in\u017einierskych zdrojov alebo na \u00farovni financovania, \u010do pom\u00f4\u017ee roz\u0161\u00edri\u0165 po\u010det otvoren\u00fdch projektov, na ktor\u00e9 sa iniciat\u00edva vz\u0165ahuje. Okrem toho, na konci minul\u00e9ho roka bolo na \u010dinnos\u0165 Fondu OpenSSF vy\u010dlenen\u00fdch 10 mili\u00f3nov dol\u00e1rov, \u010di bud\u00fa tieto prostriedky pou\u017eit\u00e9 pre iniciat\u00edvu Alpha-Omega, nie je \u0161pecifikovan\u00e9.          <\/p>\n<p>Projekt Alpha-Omega sa sklad\u00e1 z dvoch \u010dast\u00ed:   <\/p>\n<ul>\n<li class=\"l\"> \u010cas\u0165 Alpha zah\u0155\u0148a vykonanie ru\u010dn\u00e9ho auditu bezpe\u010dnosti 200 \u0161iroko pou\u017e\u00edvan\u00fdch otvoren\u00fdch projektov, najpopul\u00e1rnej\u0161\u00edch z poh\u013eadu ich vyu\u017eitia v podobe z\u00e1vislost\u00ed alebo v prvkoch infra\u0161trukt\u00fary. Pr\u00e1ca sa bude vykon\u00e1va\u0165 v spolupr\u00e1ci so spr\u00e1vcami a bude obsahova\u0165 systematick\u00fa anal\u00fdzu k\u00f3du za \u00fa\u010delom identifik\u00e1cie nov\u00fdch zranite\u013enost\u00ed a ich okam\u017eit\u00e9ho opravenia.\n<li class=\"l\"> \u010cas\u0165 Omega je zameran\u00e1 na vykonanie automatizovan\u00e9ho testovania 10 000 najpopul\u00e1rnej\u0161\u00edch otvoren\u00fdch projektov. Na vykon\u00e1vanie testovania, zlep\u0161ovanie pou\u017eit\u00fdch met\u00f3d, anal\u00fdzu v\u00fdsledkov kontroly, sprostredkovanie inform\u00e1ci\u00ed v\u00fdvoj\u00e1rom projektov a koordin\u00e1ciu spolo\u010dnej pr\u00e1ce na odstr\u00e1nen\u00ed kritick\u00fdch probl\u00e9mov bude vytvoren\u00fd samostatn\u00fd t\u00edm in\u017einierov. Hlavnou \u00falohou tohto t\u00edmu bude filtrova\u0165 falo\u0161n\u00e9 poplachy a identifikova\u0165 v automatizovan\u00fdch spr\u00e1vach re\u00e1lne zranite\u013enosti.      <\/ul>\n<p>Nezbytnos\u0165 ru\u010dn\u00e9ho auditu v f\u00e1ze Alpha je podmienen\u00e1 potrebou identifikova\u0165 skryt\u00e9 probl\u00e9my, ktor\u00e9 je problematick\u00e9 odhali\u0165 po\u010das automatizovan\u00e9ho testovania. Ako pr\u00edklad tak\u00fdchto probl\u00e9mov sa uv\u00e1dzaj\u00fa ned\u00e1vne kritick\u00e9 zranite\u013enosti v Log4j, ktor\u00e9 ohrozili infra\u0161trukt\u00fary ve\u013ek\u00e9ho mno\u017estva ve\u013ek\u00fdch spolo\u010dnost\u00ed. Projekty na audit bud\u00fa vybran\u00e9 na z\u00e1klade odpor\u00fa\u010dan\u00ed expertn\u00e9ho spolo\u010denstva a \u00fadajov z predt\u00fdm vytvoren\u00fdch hodnoten\u00ed Critically Score a Census.      <\/p>\n<p>Pripom\u00edname, \u017ee Fond OpenSSF bol vytvoren\u00fd pod z\u00e1\u0161titou organiz\u00e1cie Linux Foundation a s\u00fastre\u010fuje sa na \u010dinnosti ako koordinovan\u00e9 zverej\u0148ovanie inform\u00e1ci\u00ed o zranite\u013enostiach, \u0161\u00edrenie opr\u00e1v, v\u00fdvoj n\u00e1strojov na zabezpe\u010denie, publikovanie najlep\u0161\u00edch prakt\u00edk pre bezpe\u010dn\u00fa organiz\u00e1ciu v\u00fdvoja, identifik\u00e1ciu hrozieb s\u00favisiacich so zabezpe\u010den\u00edm v otvorenom softv\u00e9ri, vykon\u00e1vanie auditu a posilnenie bezpe\u010dnosti kritick\u00fdch otvoren\u00fdch projektov, a vytv\u00e1ranie prostriedkov na overenie identity v\u00fdvoj\u00e1rov. OpenSSF pokra\u010duje v rozvoji iniciat\u00edv ako Core Infrastructure Initiative a Open Source Security Coalition a sp\u00e1ja aj \u010fal\u0161ie s\u00favisiace aktivity s\u00favisiace so zabezpe\u010den\u00edm, podnikan\u00e9 spolo\u010dnos\u0165ami zapojen\u00fdmi do projektu. Medzi zakladaj\u00face spolo\u010dnosti OpenSSF patr\u00ed Google, Microsoft, Amazon, Cisco, Dell Technologies, Ericsson, Facebook, Fidelity, GitHub, IBM, Intel, JPMorgan Chase, Morgan Stanley, Oracle, Red Hat, Snyk a VMware.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56639\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e. \u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u044f\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Microsoft. \u041a \u0443\u0447\u0430\u0441\u0442\u0438\u044e \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0445 \u043a\u0430\u0434\u0440\u043e\u0432, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103241","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10 \u0442\u044b\u0441\u044f\u0447 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-02-07T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-02-07T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Iniciat\u00edva Alpha-Omega, zameran\u00e1 na zv\u00fd\u0161enie bezpe\u010dnosti 10 000 otvoren\u00fdch projektov | ProHoster","description":"Fond OpenSSF (Open Source Security Foundation) predstavil projekt Alpha-Omega, ktor\u00fd je zameran\u00fd na zv\u00fd\u0161enie bezpe\u010dnosti otvoren\u00e9ho softv\u00e9ru.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10 \u0442\u044b\u0441\u044f\u0447 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Alpha-Omega, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/inicziativa-alpha-omega-naczelennaya-na-povyshenie-bezopasnosti-10-tysyach-otkrytyh-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-07T19:36:39+00:00","article:modified_time":"2022-02-07T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103241","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-07 19:37:41","updated":"2022-09-29 09:49:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/103241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=103241"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/103241\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=103241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=103241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=103241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}