2018 Open Source Audit Findings: Assessing Open Source Risk in M&A - Seguridad Mania.com - España y América Latina

Open source components are the foundation of modern applications, but ineffective management of open source can lead to serious risks and unwanted media attention when security flaws lead to data breaches. The Black Duck by Synopsys 2018 Open Source Security and Risk Analysis (OSSRA) examines the previous year’s open source and security news and analyzes trends based on the audits of more than 1,100 codebases. This webinar will detail the findings in the OSSRA report, showing that M&A target organizations are not always effective in securing and managing their open source. Not surprisingly, 96% of audited codebases contained open source components, and nearly 78% contained at least one vulnerability. We’ll discuss these findings and the risk associated with not understanding them before making investment decisions.