<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Robert Charpentier</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Free and Open Source Software: Overview and Preliminary Guidelines for the Government of Canada</style></title><secondary-title><style face="normal" font="default" size="100%">Open Source Business Resource</style></secondary-title></titles><dates><year><style  face="normal" font="default" size="100%">2008</style></year><pub-dates><date><style  face="normal" font="default" size="100%">03/2008</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/127</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">After a slow beginning in the late 1990s, Free/Libre and Open Source Software (F/LOSS) has been constantly growing in importance and expanding in many software architectures all over the world. This impressive growth has been supported by the numerous successes, the high-quality reputation of F/LOSS-based systems and, of course, by the expectation of cost savings.

In 2003, Defence Research and Development Canada (DRDC) initiated a special study to determine the role of F/LOSS in our information system architectures. This study was later expanded to the whole Government of Canada (GoC). This article summarizes some key findings based on the original DRDC report published in 2004. It includes a general introduction to F/LOSS followed by some guidelines in assessing the usefulness of F/LOSS in GoC project contexts.</style></abstract><issue><style face="normal" font="default" size="100%">March 2008</style></issue><work-type><style face="normal" font="default" size="100%">Articles</style></work-type><custom1><style face="normal" font="default" size="100%">Defence Research Establishment
Robert Charpentier completed his degree in engineering physics at l'Ecole Polytechnique de Montreal in 1979. After working at CAE Electronics on flight simulators, he joined Defence Research Establishment Valcartier, where he specialized in infrared imagery and space-based surveillance. His current research domain is software security design and attack resistance of information systems operated in hostile environment. He has been deeply involved in F/LOSS studies since 2003.</style></custom1></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Robert Charpentier</style></author><author><style face="normal" font="default" size="100%">Mourad Debbabi</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Security Hardening of Open Source Software</style></title><secondary-title><style face="normal" font="default" size="100%">Open Source Business Resource</style></secondary-title></titles><dates><year><style  face="normal" font="default" size="100%">2008</style></year><pub-dates><date><style  face="normal" font="default" size="100%">06/2008</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/157</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">In today's computing world, security takes an increasingly predominant role. The industry is facing challenges in public confidence at the discovery of vulnerabilities and customers are expecting security to be delivered out of the box, even on programs that were not designed with security in mind. Software maintainers must face the challenge to improve the security of their programs and are often under-equipped to do so. Some are taking advantage of open source software (OSS) for their production systems as the availability of the source code facilitates their validation and answers their need for trustworthy programs. OSS are often implemented using the C programming language (26% according to SourceForge.net), making it is necessary to investigate the security issues related to C.

This paper summarizes key concepts related to security hardening, and demonstrates its applicability on the C language. We also propose a progressive approach to integrate security services and protection measures into existing software to ultimately make it more resistant against cyber-attacks. Given our ever increasing dependability on information technologies, it becomes critically important to provide tools to maintainers that will facilitate and accelerate the security hardening process, increasing the effectiveness of the effort and lowering the resources required to do so.</style></abstract><issue><style face="normal" font="default" size="100%">June 2008</style></issue><work-type><style face="normal" font="default" size="100%">Articles</style></work-type><custom1><style face="normal" font="default" size="100%">Defence Research Establishment
Robert Charpentier completed his degree in engineering physics at l'Ecole Polytechnique de Montreal in 1979. After working at CAE Electronics on flight simulators, he joined Defence Research Establishment Valcartier, where he specialized in infrared imagery and space-based surveillance. His current research domain is software security design and attack resistance of information systems operated in hostile environment. He has been deeply involved in F/LOSS studies since 2003.</style></custom1><custom2><style face="normal" font="default" size="100%">Concordia University
Mourad Debbabi is full professor and acting director at the Concordia Institute for Information Systems Engineering. He is Concordia University Research Chair Tier I and Specification Lead for four Java Specification Standards. He received his Ph.D. in Computer Science from Paris XI Orsay University and worked as senior scientist for PINTL Laboratory and General Electric Corporate Research before joining Concordia University in Montreal.</style></custom2></record></records></xml>