Safety, Security, and Privacy of Open-Source Ecosystems
Status: Forecasted
Posted date: September 20, 2024
Archive date: May 27, 2027
Close date: April 28, 2026
Opportunity ID: 356472
Opportunity number: 24-608
Opportunity category: Discretionary
Agency name: U.S. National Science Foundation
Agency code: NSF
Award floor: $0
Award ceiling: $0
Cost sharing required: No
Funding Instrument Types
- Grant
Category of Funding Activity
- Science and Technology and other Research and Development
Eligible Applicants
- Others
Categories (use these for quoted searches)
- agency_code:nsf
- category_of_funding_activity:science_and_technology_and_other_research_and_development
- cost_sharing_or_matching_requirement:false
- eligible_applicants:others
- funding_instrument_type:grant
- opportunity_category:discretionary
- status:forecasted
Vulnerabilities in an open-source product and/or its continuous development, integration and deployment infrastructure can potentially be exploited to attack any user (human, organization, and/or another product/entity) of the product. To respond to the growing threats to the safety, security, and privacy of open-source ecosystems (OSEs), NSF is launching theSafety, Security, and Privacy for Open-Source Ecosystems(Safe-OSE) program. This program solicits proposals from OSEs, including those not originally funded byNSF’s Pathways to Enable Open-Source Ecosystems (POSE)program, to address significant safety, security, and/or privacy vulnerabilities, both technical (e.g., vulnerabilities in code and side-channels) and socio-technical (e.g., supply chain, insider threats). Although most open-source products are software-based, it is important to note that Safe-OSE applies to any type of OSE, including those based on scientific methodologies, models, and processes; manufacturing processes and process specifications; materials formulations; programming languages and formats; hardware instruction sets; system designs or specifications; and data platforms. The goal of the Safe-OSE program is to catalyze meaningful improvements in the safety, security, and privacy of the targeted OSE that the OSE does not currently have the resources to undertake. Funds from this program should be directed toward efforts to enhance the safety, security, and privacy characteristics of the open-source product and its supply chain as well as to bolster the ecosystem’s capabilities for managing current and future risks, attacks, breaches, and responses.