Linux and Open Source Software in Azure

Chapter 4. Securing Open Source and AI Developments

Security is one of the key challenges for most technology adopters. Seventy-four percent of companies report cybersecurity as one of their main concerns, and 60% of companies have suffered attacks in recent years.¹ In addition to that, organizations mention a talent shortage and difficulty in finding suitable candidates as one of the key blockers to reinforcing their security initiatives.² And, of course, the emergence of new AI techniques is adding new challenges (and opportunities) for cybersecurity teams due to the way malicious actors are taking advantage of these technologies.

For these reasons, Microsoft has its own security program, launched the Microsoft Secure Future Initiative (SFI) in 2023, and cofounded the Open Source Security Foundation (OpenSSF) in 2020 alongside organizations like GitHub, Google, IBM, JPMorganChase, NCC Group, Red Hat, and the OWASP Foundation.³ These organizations work together to “secure open source software for the greater public good”.

Both the high priority and concern are well justified. How is Microsoft helping adopters improve their cybersecurity practices? And what is required to secure their open source investments while supporting innovation in the AI era?

This chapter provides a unified multilayer approach to make sure that every single block of your architecture is well secured and protected. Note that it shares some of the fundamentals of the universal Open Systems Interconnection ...