IBM and Red Hat Join Industry Leaders to Help Secure Software Supply Chains – Database Trends and Applications

The Linux Foundation has raised$10 millionin new investments to expand and support the Open Source Security Foundation (OpenSSF), a cross-industry collaboration that brings together multiple open source software initiatives under one umbrella to identify and fix cybersecurity vulnerabilities in open source software and develop improved tooling, training, research, best practices and vulnerability disclosure practices.

Financial commitments have been made by Premier members IBM, Red Hat, Amazon, Cisco, Dell Technologies, Ericsson, Facebook, Fidelity, GitHub, Google, Intel, JPMorgan Chase, Microsoft, Morgan Stanley, Oracle, Snyk, and VMware, with additional commitments coming from General members.

Brian Behlendorfwill serve the OpenSSF community as general manager.

The OpenSSF says that, according to industry reports, software supply chain attacks have increased 650% and are having a severe impact on business operations. In the wake of increasing security breaches, ransomware attacks and other cyber-crimes tied to open source software, government leaders around the world are calling for private and public collaboration. Because open source software makes up at least 70% of all software, the OpenSSF says it offers the natural, neutral and pan-industry forum to accelerate the security of the software supply chain.

"IBM is deeply focused on developing and building highly secure hybrid cloud, AI and quantum-safe technologies that are designed to protect our clients' most sensitive workloads both today and into the future," saidJamie Thomas, general manager, strategy and development and IBM enterprise security executive. "As a long-time open source leader, IBM looks forward to working with the OSSF, our industry partners and open source communities towards addressing the ever increasing challenge of hardware and software open source supply chain security.

"Open source is pervasive in software solutions of all kinds, and cybersecurity attack rates are on the rise, said Chris Wright, senior vice president and CTO,Red Hat. Our customers look to Red Hat to provide trust and enhanced security in our open source-based portfolio. Open source and community collaboration is the best way to solve big, industry wide challenges, such as open source supply chain security. And that's why we're excited to join together with the Linux Foundation and other industry leaders so we can continue to improve the technologies andpractices to build a more secure future from open source software.

The OpenSSF is home for a variety of open source software, open standards and other open content work for improving security. Examples include:

More information is available about the OpenSSF athttps://openssf.organd about the Linux Foundation at http://www.linuxfoundation.org.

See the original post:
IBM and Red Hat Join Industry Leaders to Help Secure Software Supply Chains - Database Trends and Applications