OPERATING SYSTEMSOS Linux

Addressing the Systemic Issues in the Software Supply Chain that Led to Log4Shell – Julian Gordon

The open source community is vulnerable to new kinds of attacks on the software supply chain and there have been efforts by many to address those challenges, including across Asia. These efforts urgently require new processes, tools and initiatives to drive adoption.

Heightened interest, by governments and companies worldwide, has seen the open source community respond with a mobilisation plan to achieve specific goals. The Linux Foundation and OpenSSF delivered a first-of-its-kind plan to broadly address open source and software supply chain security, outlining approximately US$150m of funding over two years to rapidly advance solutions to the ten major problems facing open source software security.

These concrete steps are designed to produce immediate improvements and build strong foundations for a more secure future. Find out what is happening around these initiatives in Asia and what you can do to be more secure and support this global security effort.

Julian Gordon
VP, APAC, Hyperledger Foundation & Open Source Security Foundation
Julian Gordon is VP Asia Pacific for the Open Source Security Foundation and Hyperledger Foundation – flagship initiatives at The Linux Foundation. Julian is an advocate for open source technology and its huge benefits for business, public sector and societies worldwide.

OpenSSF is the Linux Foundation’s cross-industry cybersecurity initiative, bringing a vital security-centred approach to the use and development of the open source software that underpins modern business and society. Hyperledger is the foundation’s enterprise blockchain initiative, working with members globally across all industries. Both are collaborative initiatives with leading companies, government agencies, developers and academic institutions. Julian is engaged strategically and practically with corporations, business leaders and technologists in Asia Pacific developing key cybersecurity and blockchain initiatives. He builds and supports the OpenSSF and Hyperledger memberships and communities in the region and links them with global developments.

Julian started his career in London, working in technology in banking at HSBC, Lloyds Bank and Kleinwort Benson. Before working with the Linux Foundation he spent 20 years in senior APAC leadership roles with technology companies including HP, Cisco and Sun Microsystems.

source

by FOSSASIA

linux foundation