commercial off the shelf

Tags

Aug 9, 2021 | 10:47 am

Study Finds Vulnerabilities in COTS Open-Source Components

Aug 9, 2021 | 10:47 am

A recent study found a host of vulnerabilities in the use of open-source components in commercial off-the-shelf (COTS) IT products, which undergo less stringent regulation in their use by the Federal government. […]

CIO Briefing Room (1,522)
- CDM (126)
- Critical Infrastructure (61)
- Federal CIO Council (97)
- FedRAMP (229)
- FISMA (87)
- FITARA (250)
- MGT Act (40)
- Privacy & Civil Liberties (92)
- Supply Chain (102)
- TBM (13)
- TMF (174)
- Zero Trust (204)
Civilian Agencies (6,486)
- Agriculture (90)
- CFTC (1)
- CMS (23)
- Commerce (397)
  - NIST (22)
  - NOAA (9)
  - NTIA (15)
  - USPTO (16)
- Education (61)
- Energy (279)
- EPA (39)
- FCC (367)
- FDIC (5)
- FEC (1)
- FEMA (6)
- FTC (40)
- General Services Administration (698)
- Government Accountability Office (516)
- Health and Human Services (319)
  - NIH (20)
- Homeland Security (1,300)
  - CISA (250)
  - USCIS (3)
- Housing and Urban Development (34)
- Interior (48)
- IRS (181)
- Justice (244)
- Labor (93)
- NASA (109)
- National Science Foundation (137)
- NIST (308)
- Nuclear Regulatory Commission (13)
- OPM (332)
- SEC (1)
- Small Business Administration (93)
- Social Security Administration (56)
- State (189)
- Transportation (164)
  - FAA (26)
- Treasury (128)
- USAID (8)
- Veterans Affairs (573)
Congress (2,440)
- Budget (290)
- Hearings / Oversight (668)
- Legislation (1,099)
Defense & Intelligence (2,996)
- Air Force (225)
- Army (290)
- CIA (46)
- Coast Guard (2)
- DARPA (89)
- DIA (22)
- DISA (128)
- DIU (46)
- DOD CIO (369)
- FBI (104)
- GEOINT (11)
- IARPA (23)
- JAIC (13)
- Marine Corps (32)
- Navy (141)
- NGA (43)
- NSA (144)
- Nuclear (1)
- ODNI (94)
- Space Force (59)
- U.S. Cyber Command (51)
Emerging Tech (7,878)
- Artificial Intelligence (1,131)
- Big Data (275)
- Blockchain (61)
- Broadband (217)
- Cloud Computing (870)
- Customer Experience (139)
- Cybersecurity (3,426)
- Data Center (204)
- Data Management (458)
- Digital Service (92)
- Election Security (93)
- Health IT (279)
- Hybrid Cloud Infrastructure (6)
- Industry (229)
- Innovation (365)
- Internet of Things (136)
- Mobility (96)
- Open Government (71)
- Quantum (113)
- Telework (204)
Happy Holidays (5)
Industry News (1,326)
Judiciary (66)
- Supreme Court (9)
White House (1,468)
- NARA (22)
- OMB (458)
- ONCD (47)
- OSTP (150)
- U.S. Digital Service (51)
Workforce Issues (856)
- DEI (3)
- Education (127)
- STEM (56)
- Women in Tech (68)

Cookie	Duration	Description
AWSALBCORS	7 days	Amazon Web Services set this cookie for load balancing.
cookielawinfo-checkbox-advertisement	1 year	Set by the GDPR Cookie Consent plugin, this cookie records the user consent for the cookies in the "Advertisement" category.
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
CookieLawInfoConsent	1 year	CookieYes sets this cookie to record the default button state of the corresponding category and the status of CCPA. It works only in coordination with the primary cookie.
JSESSIONID	session	New Relic uses this cookie to store a session identifier so that New Relic can monitor session counts for an application.
PHPSESSID	session	This cookie is native to PHP applications. The cookie stores and identifies a user's unique session ID to manage user sessions on the website. The cookie is a session cookie and will be deleted when all the browser windows are closed.
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
_pxhd	1 year	PerimeterX sets this cookie for server-side bot detection, which helps identify malicious bots on the site.

Cookie	Duration	Description
lidc	1 day	LinkedIn sets the lidc cookie to facilitate data center selection.
li_gc	5 months 27 days	Linkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes.
UserMatchHistory	1 month	LinkedIn sets this cookie for LinkedIn Ads ID syncing.
__cf_bm	30 minutes	Cloudflare set the cookie to support Cloudflare Bot Management.

Cookie	Duration	Description
AWSALB	7 days	AWSALB is an application load balancer cookie set by Amazon Web Services to map the session to the target.
_gat	1 minute	Google Universal Analytics sets this cookie to restrain request rate and thus limit data collection on high-traffic sites.

Cookie	Duration	Description
AnalyticsSyncHistory	1 month	Linkedin set this cookie to store information about the time a sync took place with the lms_analytics cookie.
CONSENT	2 years	YouTube sets this cookie via embedded YouTube videos and registers anonymous statistical data.
ln_or	1 day	Linkedin sets this cookie to registers statistical data on users' behaviour on the website for internal analytics.
pardot	past	The pardot cookie is set while the visitor is logged in as a Pardot user. The cookie indicates an active session and is not used for tracking.
UID	1 year 1 month 4 days	Scorecard Research sets this cookie for browser behaviour research.
vuid	1 year 1 month 4 days	Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos on the website.
_ga	1 year 1 month 4 days	Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
_ga_*	1 year 1 month 4 days	Google Analytics sets this cookie to store and count page views.
_gcl_au	3 months	Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.
_gid	1 day	Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously.
__gads	1 year 24 days	Google sets this cookie under the DoubleClick domain, tracks the number of times users see an advert, measures the campaign's success, and calculates its revenue. This cookie can only be read from the domain they are currently on and will not track any data while they are browsing other sites.