{"id":5246,"date":"2013-06-27T08:13:11","date_gmt":"2013-06-27T06:13:11","guid":{"rendered":"https:\/\/staging.alainveuve.ch\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/"},"modified":"2013-06-27T08:13:11","modified_gmt":"2013-06-27T06:13:11","slug":"remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi","status":"publish","type":"post","link":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/","title":{"rendered":"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI"},"content":{"rendered":"

In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of discussion and tweeting about it. The study was written by people from ]init[, an agency that works not exclusively but primarily for companies close to the federal government<\/a>. Employees of the Frauenhofer Institute for Secure Information Technology<\/a> are also named as authors. <\/p>\n

The details of the study have already been widely commented on, so I won’t repeat them here. However, in the summary of the study, which from my point of view belongs at the beginning, there is the following remarkable passage; <\/p>\n

<\/p>\n

“First of all, it should be noted that the open source projects under consideration have demonstrably implemented a security process. The software has a product character with a published release plan, a transparent bug tracker, etc. The implementation of a security process corresponds to the state of the art, which even many commercial software packages created under time pressure do not achieve. The resulting software is – measured by its functionality and the resulting complexity – a good choice for a service provider.”<\/p><\/blockquote>\n

And further:<\/p>\n

The structure and information content in the publication of vulnerabilities are exemplary in Drupal, TYPO3, Joomla! (feed) and Plone…”<\/p><\/blockquote>\n

I am copying this section for later discussions regarding security in OpenSource CMS. You can’t say it much more clearly and directly. <\/p>\n

The entire study can be downloaded here<\/a>.<\/p>\n

 <\/p>\n

 <\/p>\n

Artikel auf Social Media teilen:<\/p>\n<\/div>

<\/div>