12. Why caring
about license
issues?
Why is it hard to handle licenses?
13. 1 Respect the author’s
wishes
I want it to be
GPL… or LGPL…
or BSD
14. 2 License data may not
be reliable
Open Source Product
http://ossproduct.com Google
Open Source Product
LGPL
License
Agreement
Product
Product
Open Source Product shipped with the EPL
license
GPL V2
17. License data
may be
http://jwebmail.sourceforge.net/news.html
inconsistent
http://jwebmail.sourceforge.net/about.html
http://sourceforge.net/projects/jwebmail/
18. License data
may be
http://jwebmail.sourceforge.net/news.html
inconsistent
http://jwebmail.sourceforge.net/about.html
http://sourceforge.net/projects/jwebmail/
19. License data
may be
http://jwebmail.sourceforge.net/news.html
inconsistent
http://jwebmail.sourceforge.net/about.html
http://sourceforge.net/projects/jwebmail/
20. License data
may be
http://jwebmail.sourceforge.net/news.html
inconsistent
http://jwebmail.sourceforge.net/about.html
http://sourceforge.net/projects/jwebmail/
21. 3 Non compliance =
Serious implications
Material loss
IP violation
Lawsuits
Devaluation Injunctions
25. BusyBox fills a lawsuit
against Westinghouse
v/s
December 14th 2009
26. Settlement: Westinghouse
assessed damages,
lost revenue,and lost
inventory
August 3rd 2010 - Settlement: Westinghouse assessed $150.000 in damages , lost
revenue, and millions of dollars of inventory lost (all HDTV were donated to charity)
48. Iteratively detect license
data
Heuristics
specs
Developer Software factory
Open Source report Open Source report
49. Iteratively detect license
data
Heuristics
specs
Product
Developer Software factory Final product
Open Source report Open Source report
50. Iteratively detect license
data
Heuristics
specs
Product
Developer Software factory Final product
Open Source report Open Source report Open Source report
57. It’s like bug detection...
early is better
license orvulnerability issue
Remediation cost of a
cost $
Deploy
Deliver
Code Test & Build Package
Lifecycle phase
Heuristics
specs
Product
Developer Software factory Final product Production environment