The German Federal Office for Information Security (BSI) has published the Technical Guideline TR-03185-2 “Secure Software Lifecycle for Open Source Software” (OSS). It was created in dialogue with the OSS community and provides simple, abstract, and practicable criteria that define a framework for the secure development of OSS. This is also calledFree / Libre and Open-Source Software (FLOSS / FOSS). The criteria are applicable to all OSS projects, regardless of team size, commercial or non-profit background, programming language used, and other factors.
TR-03185-2 is aimed at all individuals who work in OSS projects. It complements TR-03185(-1), which will be published in 2024 and focuses on the life cycle of proprietary, i.e. not freely accessible, software. With these two technical guidelines, the BSI is helping to significantly increase the security level of software products. Secure software is a basis for the secure use of IT products in government, business, and society.
URL of download: Download BSI TR-03185-2 Secure Software-Lifecycle for Open Source Software (PDF)
Leave a Reply