Software Integrity Blog
Top open source licenses and legal risk for developers
October 21, 2019
Smart organizations in the business of building software need to use a mix of application testing tools to ensure their code is high-quality and secure.
A security group should help lift the organization into a positive, proactive attitude and work security into all aspects of development and operations.
![[Infographic] 7 truths to improve your software security program](http://www.synopsys.com/blogs/software-security/wp-content/uploads/2019/11/improve-software-security-program-header.jpg)
The Building Security In Maturity Model (BSIMM) can help you improve your software security program, regardless of industry, size, or application mix.
Open source might be free, but it’s not risk-free. Let’s examine the potential legal cost of open source use associated with license noncompliance.
A number of election security bills and discussion drafts are currently before the House and Senate. If passed, could they really lead to secure elections?
![[Webinars] CI/CD optimization and automated testing, open source audit reports](http://www.synopsys.com/blogs/software-security/wp-content/uploads/2019/10/open-source-audit-webinar.jpg)
Learn how our CloudBees partnership helps users optimize CI/CD and automate AppSec Testing, and steps to take after you get an open source audit report.
No password is secure. With so many password alternatives now available, such as FIDO and passwordless authentication, we can get rid of passwords for good.
During Cybersecurity Awareness Month, the Software Integrity Group hosted Security Week 2019, with presentations, guest speakers, and a capture-the-flag.
Technology due diligence may turn up surprises, but it’s better to find them sooner rather than later. Third-party audits can help you assess your risk.
![[Webinars] How to risk rank vulnerabilities, insights from BSIMM10](http://www.synopsys.com/blogs/software-security/wp-content/uploads/2019/10/risk-rank-vulns-webinar.jpg){kind=icon}
Learn about five ways to approach risk ranking in vulnerability management, and hear key insights into real-life software security programs from BSIMM10.
- Agile, CI/CD & DevOps
- Application Security
- Automotive Cyber Security
- Cloud Security
- Container Security
- Data Breach Security
- Developer Enablement
- Featured
- Financial Cyber Security
- Fuzz Testing
- Healthcare Security & Privacy
- Interactive Application Security Testing (IAST)
- IoT Security
- Medical Device Security
- Mergers & Acquisitions
- Mobile App Security
- News & Announcements
- Open Source Security
- Security Training & Awareness
- Software Architecture & Design
- Software Compliance, Quality & Standards
- Software Composition Analysis (SCA)
- Software Security Program
- Software Security Research
- Static Analysis (SAST)
- Web Application Security
- Webinars