Much of the critical infrastructure that supports industries such as health care, transportation, and energy production relies on open-source software, and the federal government is investing $11 million to understand how this software is used and how to better secure it. The White House and the Department of Homeland Security (DHS) have launched the Open-Source Software Prevalence Initiative (OSSPI) last week.

National Cyber ​​Director Hary Coker announced the initiative during the DEF CON conference in Las Vegas last week, telling attendees that the funding comes from the Bipartisan Infrastructure Act of 2021. The project aims to learn how open-source software is used in critical infrastructure, with the ultimate goal of strengthening the nation’s cybersecurity.

“We know that open source is at the heart of our digital infrastructure, and it’s vital that we as a government contribute to the community as part of broader infrastructure efforts,” Coker told conference attendees. He said the government can’t do the job alone, and it’s imperative that the cybersecurity community gets involved.

“I know that the same set of values ​​that drives responsible vulnerability disclosure will drive you to continue to protect the Internet. I know that the Internet is a safer place today because of all your efforts,” Coker said.

Last week, the White House also released the findings of its recent Request for Information into its Open-Source Software Security Initiative (OS3I). The report highlights 12 recommendations from the cybersecurity community, including guidelines to promote research and development, secure package repositories, and strengthen ties between government and open-source communities.