Security issues surrounding the use of open source software by online students

Free/Open Source Enterprise Resource Planning (FOS-ERP) software is an emerging phenomenon having the potential to revolutionize the ERP market worldwide. This chapter focuses on the FOS-ERP market for Small and Medium-sized Enterprises (SMEs) and aims at informing managers, scholars, students and researchers of the opportunities and the related risks for SMEs wishing to adopt and implement a FOS-ERP solution. It is widely accepted that SMEs, which have limited capital and other resources, are among the organizations to be benefited by the existence of FOS-ERP by acquiring a system similar to that used by large enterprises. At the same time there are certain risks in adopting a FOS-ERP solution such as security issues and hidden costs. Guidelines for SMEs to eliminate these risks are provided. In order to define the backdrop of FOS-ERP systems, Web 2.0, cloud computing and Open Source Software (OSS) are also discussed.

Download Full-text

B2SMatcher: fine-Grained version identification of open-Source software in binary files

Cybersecurity ◽

10.1186/s42400-021-00085-7 ◽

2021 ◽

Vol 4 (1) ◽

Author(s):

Gu Ban ◽

Lili Xu ◽

Yang Xiao ◽

Xinhua Li ◽

Zimu Yuan ◽

...

Keyword(s):

Open Source ◽

Open Source Software ◽

State Of The Art ◽

Source Code ◽

Fine Grained ◽

Security Issues ◽

Identification Approach ◽

Commercial Off The Shelf ◽

And Function ◽

Redundant Functions

AbstractCodes of Open Source Software (OSS) are widely reused during software development nowadays. However, reusing some specific versions of OSS introduces 1-day vulnerabilities of which details are publicly available, which may be exploited and lead to serious security issues. Existing state-of-the-art OSS reuse detection work can not identify the specific versions of reused OSS well. The features they selected are not distinguishable enough for version detection and the matching scores are only based on similarity.This paper presents B2SMatcher, a fine-grained version identification tool for OSS in commercial off-the-shelf (COTS) software. We first discuss five kinds of version-sensitive code features that are trackable in both binary and source code. We categorize these features into program-level features and function-level features and propose a two-stage version identification approach based on the two levels of code features. B2SMatcher also identifies different types of OSS version reuse based on matching scores and matched feature instances. In order to extract source code features as accurately as possible, B2SMatcher innovatively uses machine learning methods to obtain the source files involved in the compilation and uses function abstraction and normalization methods to eliminate the comparison costs on redundant functions across versions. We have evaluated B2SMatcher using 6351 candidate OSS versions and 585 binaries. The result shows that B2SMatcher achieves a high precision up to 89.2% and outperforms state-of-the-art tools. Finally, we show how B2SMatcher can be used to evaluate real-world software and find some security risks in practice.

Download Full-text

SMEs and FOS-ERP Systems

Free and Open Source Enterprise Resource Planning ◽

10.4018/978-1-61350-486-4.ch009 ◽

2012 ◽

pp. 134-144 ◽

Cited By ~ 3

Author(s):

Constantinos J. Stefanou

Keyword(s):

Cloud Computing ◽

Web 2.0 ◽

Open Source ◽

Open Source Software ◽

Enterprise Resource Planning ◽

Resource Planning ◽

Erp Systems ◽

Security Issues ◽

Erp Software ◽

Free Open Source

Free/Open Source Enterprise Resource Planning (FOS-ERP) software is an emerging phenomenon having the potential to revolutionize the ERP market worldwide. This chapter focuses on the FOS-ERP market for Small and Medium-sized Enterprises (SMEs) and aims at informing managers, scholars, students and researchers of the opportunities and the related risks for SMEs wishing to adopt and implement a FOS-ERP solution. It is widely accepted that SMEs, which have limited capital and other resources, are among the organizations to be benefited by the existence of FOS-ERP by acquiring a system similar to that used by large enterprises. At the same time there are certain risks in adopting a FOS-ERP solution such as security issues and hidden costs. Guidelines for SMEs to eliminate these risks are provided. In order to define the backdrop of FOS-ERP systems, Web 2.0, cloud computing and Open Source Software (OSS) are also discussed.

Download Full-text