Vasudevan, Srinidhi ORCID: https://orcid.org/0000-0002-8584-9112, Piazza, Anna ORCID: https://orcid.org/0000-0002-5785-6948, Ramakrishnan, Guru Krishna and Conaldi, Guido ORCID: https://orcid.org/0000-0003-3552-7307 (2026) A study of cybersecurity literature on open-source software and AI. Technical Report. Department for Science, Innovation and Technology (DSIT) and Department for Digital, Culture, Media & Sport (DCMS), London, UK.

Preview

PDF (Open Access Report) 54400 VASUDEVAN_A_Study_Of_Cybersecurity_Literature_On_Open-Source_Software_And_AI_(OA REPORT)_2026.pdf - Accepted Version Available under License Open Government License 3.0. Download (585kB) | Preview

Abstract

Open-source software underpins most global digital infrastructure; the OSSRA reports open-source components in 96% of commercial codebases, including government, critical services, and AI pipelines. For decades this dependency was governed inconsistently, until incidents such as Log4Shell (2021)[footnote 1] and the XZ Utils backdoor (2024)[footnote 2] made its risks undeniable. Open-source AI has sharpened the challenge: model weights, open datasets, and inference tooling are now infrastructure, yet frameworks built for traditional software do not transfer cleanly to AI artefacts such as weights, training data, and fine-tuning pipelines. The Department for Digital, Culture, Media & Sport (DCMS) commissioned this review to assess the cybersecurity landscape for open-source software (OSS) and open-source AI (OSAI), map global frameworks and practices, identify security gaps and emerging risks, and provide actionable early recommendations.

Item Type:	Monograph (Technical Report)
Uncontrolled Keywords:	OSS, OSAI, systematic review
Subjects:	H Social Sciences > H Social Sciences (General) H Social Sciences > HD Industries. Land use. Labor > HD61 Risk Management Q Science > QA Mathematics > QA75 Electronic computers. Computer science Q Science > QA Mathematics > QA76 Computer software
Faculty / School / Research Centre / Research Group:	Greenwich Business School Greenwich Business School > Networks and Urban Systems Centre (NUSC) Greenwich Business School > School of Business, Operations and Strategy
Last Modified:	11 Sep 2026 13:57
URI:	https://gala.gre.ac.uk/id/eprint/54400

Actions (login required)

View Item

Downloads