Open Source Security Tools
Home > Ask the Security Experts > Application Security Questions & Answers > Should enterprises use open source productivity suites?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Should enterprises use open source productivity suites?

Michael Cobb EXPERT RESPONSE FROM: Michael Cobb

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 24 November 2007
I've noticed that free and open source productivity suites like OpenOffice and Lotus Symphony seem to be growing in popularity. Should I be concerned about my users starting to experiment with these applications and handle files created by them?

>
EXPERT RESPONSE
Many IT administrators remain wary of open source software, often citing its lack of any warranty protection. However, it's extremely unusual for proprietary software suppliers to actually warrant that their software will provide uninterrupted and error-free operation. Although there is no expensive hotline to call if you have a problem or query, many open source programs are well-supported by enthusiastic user support communities, which provide active forums, up-to-date documentation and tutorials. Mature open source software, particularly in the field of IT security, can often be a viable alternative to proprietary software.

A series of UK government-sponsored trials into open source implementations produced some interesting results. The trials found that open source application software used for specific tasks is often fit for purpose and that buying specialist software can lead buyers to suffer "hidden lock-in."

If your users feel that there are open source programs that would benefit your organization, then it is certainly worth investigating them further. I would recommend, however, that you conduct a controlled trial rather that let your users "experiment." Allowing users to freely download software that has not been correctly assessed and tested can lead to programs that contain malware or spyware being installed inadvertently. By setting up a managed user group to review approved applications, you can supervise who can install which programs. You can also monitor any system compatibility and usability issues.

While assessing a software application, it is important to review what the software does, ensure that its functionality matches your requirements for a particular task, and understand what help and support is provided. You need to be sure that you have the in-house skills and resources to support any additional applications that you allow your users to install and use. And, of course, files generated by office-type applications need to be compatible with the mainstream applications used by your clients and vendors.

Although open source software is less likely to be targeted by hackers than mainstream applications, subscribe to any product newsletters; these will keep you abreast of any security alerts. Also read and understand the open source license under which it is distributed and how it can be used. Open source software is not the answer to every situation, but some applications have been around for several years, won numerous awards, and can offer a viable alternative to organizations on a tight budget.

More information:

  • Learn how federal aid has helped uncover a number of open source flaws.
  • A new group of technology vendors, including Microsoft and Symantec, are joining together to raise awareness about the need for more secure code.


  • Sound Off! -   


    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Application Security
    Can IBM's SMash technology secure Web applications?
    Protecting exposed servers from Google hacks (and Google 'dorks')
    Which automated quality assurance tools can be used to test software?
    Has proof-of-concept mobile device malware translated into any meaningful attacks?
    How to test the security of personal details submitted to a website
    Is security improved when the number of Internet gateways is reduced?
    Are Internet cafe users' email credentials at risk?
    Which operating system can best secure an FTP site?
    Will firewall technology have to adapt to applications that use port 80?
    How secure is a mobile phone platform that has an open source framework?

    Securing Productivity Applications
    Oracle releases 45 database, application fixes
    Hacker toolkit targets Microsoft Access zero-day
    Microsoft Word zero-day being actively exploited
    Using Nessus Attack Scripting Language (NASL) to find application vulnerabilities
    Startup Symplified delivers SSO in the cloud
    Protecting exposed servers from Google hacks (and Google 'dorks')
    Apple updates QuickTime to plug dangerous flaw
    Which automated quality assurance tools can be used to test software?
    Product review: Mu-4000 Security Analyzer
    Product review: Klocwork Insight 8.0

    Open Source Security Tools
    Analysis tool uses Intel virtualization to hide from malware
    Can IBM's SMash technology secure Web applications?
    Using Nessus Attack Scripting Language (NASL) to find application vulnerabilities
    What are best practices for creating an IDS and maintaining a signature database?
    How to install and configure Nessus
    How to run a Nessus system scan
    Nessus: Vulnerability scanning in the enterprise
    Nessus 3 Tutorial
    Screencasts: On-screen demonstrations of today's IT tools
    Screencast: An introduction to the Open Source Security Testing Methodology Manual (OSSTMM)

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    sheepdip  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice

    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts