AppSec Decoded: An introduction to the Synopsys Cybersecurity Research Center
In this episode of AppSec Decoded, we discuss some of the research published by the Synopsys Cybersecurity Research Center (CyRC).
One of the relatively newer teams within the Synopsys Software Integrity Group is the Cybersecurity Research Center (CyRC), established in 2019.
And one of the major players on that team is Jonathan Knudsen, head of global research at CyRC.
In this episode of AppSec Decoded, recorded live at RSA 2022 in San Francisco, Knudsen talks with Taylor Armerding, security advocate at Synopsys, about CyRC’s major annual reports, including the “Open Source Software and Risk Analysis”(OSSRA) report, which uses anonymized data from M&A audits to develop a profile of how much open source is in the software ecosystem, how organizations are using it, and whether they’re keeping it up-to-date.
CyRC researchers also contribute to the quality of open source by providing a coordinated, responsible disclosure process when Synopsys researchers discover undisclosed defects in the software of other organizations.
As Knudsen puts it, it’s a win, win, win—it helps improve the quality of open source, and it’s a win for both the company and the researcher who discovered it.
Learn more about the CyRC research in the 2022 OSSRA report
*** This is a Security Bloggers Network syndicated blog from Application Security Blog authored by Synopsys Editorial Team. Read the original post at: https://www.synopsys.com/blogs/software-security/appsec-decoded-cybersecurity-research-center/
