The Linux Foundation Member Summit 2020

Understanding the health and security posture of open source projects can be a challenge for software development organizations. These challenges can make utilizing open source resources a high-risk proposition for enterprise environments. However, researchers are leveraging new metrics and machine learning models, to develop unique ways to quantify the health and relative security posture of open source projects.

In this discussion, we'll discuss work that is being done in both academics and private business to establish tangible measures of open source project health. We'll share some of the initial results of this ongoing research as well as lessons learned and a vision of where this research is headed.

The session will discuss how these new measures of project health can be put to practical use. Attendees will leave with a better understanding of how quantifying the trustworthiness of projects can enable developers. We'll demonstrate how this enablement can improve both development efficiency and overall security posture of applications.