Opening The White Box: Testing and Governance Considerations for the Management of Open-Source Software

The prevalence of open-source software (OSS) promotes the integration of common software features into existing applications. However, the use of OSS can increase the risk of vulnerabilities because code segments are frequently reused across a whole organization. In addition, the rise of malicious coders has made cyberattacks easier to perpetrate and harder to detect.

This paper addresses the need for increased security testing of code when developers utilize open-source software as part of application development.