Security Engineering and Open Source Software Development

Open source projects usually do not define tasks and workflows explicitly in contrast to the closed source software business. However, this does not mean that security related quality assurance and maintenance does not happen. The paper wants to make open source software more secure by learning how secure systems are being built in an open source development process. This position paper reflects the ongoing empirical research and expected results on security engineering and free/open source software development at the research group Software Engineering at Freie Universitat Berlin.