CII Best Practices Badge, 1 Year Later - David Wheeler, IDA
Channel: The Linux Foundation
Date: 10/03/2017

OSS is critical in the world today. However, OSS projects do not always follow best practices, leading to dangerous security vulnerabilities that have far-reaching consequences. To address this, the Core Infrastructure Initiative (CII) established in early 2016 a "best practices badge" program. This program identified a set of "best practices" criteria and created a process so OSS projects could get a badge for meeting these criteria. This incentivizes projects to apply best practices and helps users identify projects using best practices.

This presentation will discuss the current status of the badging program, including the projects that have received badges, security improvements projects have made to get the badge, some interesting ways that projects have met the criteria, the criteria most missed today, and the efforts to create higher-level badges (including draft criteria).

About David A. Wheeler 

Dr. David A. Wheeler is an expert on open source software (OSS) and on developing secure software. He leads the CII Best Practices badging effort and CII census. He has a PhD in Information Technology, a Master's in Computer Science, a certificate in Information Security, and a B.S. in Electronics Engineering, all from George Mason University (GMU). He is also a Certified Information Systems Security Professional (CISSP). He lives in Northern Virginia, and works at the Institute for Defense Analyses (IDA).

He is an experienced speaker who has spoken around the world on a variety of OSS and security topics; a partial list is available at http://www.dwheeler.com/presentations.html