LG Elec gets open-source software security certification

South Korean electronics giant LG Electronics Inc. announced on Friday that it has been recognized as a company that complies with the "International Standard for Open Source Software Security Management System" set by the OpenChain Project of the non-profit Linux Foundation in the United States. The OpenChain Project is a voluntary consortium of companies for compliance with usage rights and vulnerability management of open-source software.

LG Electronics has met all 30 security certification requirements specified by the OpenChain project, such as establishing internal security policies, periodic updates of security policies and the use of various tools for security testing. LG Electronics is the first company in the global manufacturing industry to obtain this certification.

The importance of open-source software supply chain security is increasing. According to the "2023 Open Source Security Risk Report" published by global security company Synopsys earlier this year, about 81% of open-source software programs used in software development have vulnerabilities.

Open source software is characterized by the fact that the source code is publicly available and can be freely used by anyone. It is widely used for service and platform development as it can reduce the time and cost required for software development and expand the ecosystem.

In 2019, LG Electronics was recognized as a company that complies with the "International Standard for Open Source Software License." Since 2014, it has been developing and operating Free and Open Source Software Light (FOSSLight), an open-source software management tool, and has been contributing to the invigoration of the domestic and foreign open-source software ecosystem by publicly releasing it to external developers since 2021.

"We will enhance the open source security management system throughout the lifecycle of our products to further strengthen the security of our products," said Paik In-seong, the head of LG Electronics' Software Center.

Write to Ik-Hwan Kim at lovepen@hankyung.com