Skip to main content
FOSDEM PWA

It's Time to Audit Open Source: Success Stories with OSTIF

UB5.132 | Day 1 | 17:00 - 17:25 | Speakers: Amir Montazery

It's Time to Audit Open Source: Success Stories with OSTIF
A picture of a devroom at FOSDEM 2024
Open in browser

Notes

Abstract

Achieving improved security in the open source ecosystem is more than a theoretical goal but a plausible reality as shown by the track record of nonprofit Open Source Technology Improvement Fund, Inc. Following a best practice of independent code review with a process specifically tailored to open source projects and communities, OSTIF has worked on over 100 security audits of projects ranging from git, cURL, kubernetes, php, sigstore, and has audit reports and numerous vulnerability fixings to demonstrate effectiveness.

Speakers

Amir Montazery

Amir Montazery is the Managing Director and Cofounder of Open Source Technology Improvement Fund, Inc (OSTIF). OSTIF is a Chicago-based organization focused on directly helping open-source software projects improve their security posture. Amir comes from a background in Finance, IT and Internal Auditing, applying years of experience to help develop OSTIF’s processes and partnerships. Furthermore, Amir is responsible for negotiating and organizing over 12,000 hours of security-focused work for organizations like Google and Amazon Web Services along with groups like Mozilla Foundation and Open Source Security Foundation (OpenSSF).

Notice: The placeholder video image is licensed under CC BY-SA 4.0. The original image can be found hereChanges made to the image are: Cropped the image to a new ratio, part of the image was cut off.