Collaborate Disseminate
Black Duck is among platforms that lead the pack, cited for “very strong policy management and SDLC integrations and strong proactive vulnerability management.” This week we’re happy to announce that Forrester has recognized… Continue reading Forrester recognizes Synopsys as a leader in software composition analysis
Between operational technology and open source, the supply chain is rapidly expanding – and companies that can’t keep up will be the next security targets, said experts at RSA Conference 2019. Continue reading RSA Conference 2019: Operational Technology Widens Supply Chain Attack Surfaces
Open source is eating software, but Red Hat and Synopsys let you build and deploy containers securely and at scale with an OpenShift and Black Duck integration. Netscape founder Marc Andreessen once proclaimed that software is eating the world. He mean… Continue reading Red Hat OpenShift integrates with new Synopsys Polaris platform
SCA tools are an essential part of your AppSec toolkit, because free and open source software—just like free puppies—comes with hidden costs and risks. This entry in our BSIMM Monthly Insights series was contributed by guest author Stacy Mo… Continue reading The hidden costs and risks of free puppies (and open source)
Managing open source risk is essential today, when open source use is abundant but can threaten your business. Here are three key points from our webinar. Software finished eating the world sometime in 2016, when Marc Andreessen modified his original s… Continue reading 3 takeaways from “Managing the Business Risks of Open Source” webinar
With containers, we’ve changed the way we deploy applications. Now it’s time to change the way we secure them, with container scanning tools for open source. Containers require a different approach to application security Containers, which … Continue reading Announcing Black Duck OpsSight 2.2—Container security at scale
In an open source software audit, you should scan all software assets required to build your applications. But how do you identify and locate them? One of the biggest challenges when preparing for an open source audit is to determine the set of files t… Continue reading Preparing for an open source audit: Which software assets are worth analyzing?
The past decade charts the reach of open source into every industry. But what does the future of open source hold? Here are some open source predictions. The original version of this post was published on Forbes. We have been awash in predictions for w… Continue reading The future of open source software: More of everything
The past decade charts the reach of open source into every industry. But what does the future of open source hold? Here are some open source predictions. The original version of this post was published on Forbes. We have been awash in predictions for w… Continue reading The future of open source software: More of everything
2018 saw developments in many free and open source software legal issues, including copyright, license compliance, patent nonaggression, and antitrust law. By Mark Radcliffe, Victoria Lee and Chris Stevenson The year 2018 was a year in which the FOSS b… Continue reading Top 10 FOSS legal developments in 2018