I just read this interesting paper/poster. The conclusion of the paper is:
"The arguments favoring the inherent security of open source software do not appear to hold up to scrutiny. These findings provide evidence to security managers to focus more on holistic software security management, irrespective of the proprietary-nature of the underlying software."
It took me a while to figure out the stats-speak, but it seems that there were three primary hypotheses:
- OSS patches faster than proprietary.
- OSS has fewer vulnerabilities.
- OSS patch high severity patches faster.
I will be writing a two page paper on this and patching for the other side of the digital divide for SATNAC.
Trackbacks
Trackback specific URI for this entry
No Trackbacks

