antelink presentation at eole 2011, barcelona, spain

1© Copyright 2010-2011 Antelink SAS

EOLE 2011Barcelona, Spain

Managing FOSS during development Preventive and curative approaches.

Guillaume ROUSSEAU, CEO


About Antelink

Open Source goes main stream

Third part related quality issues

Preventive vs curative approaches

Antepedia,toward the census of open source code history

Table of Content


About Antelink

A venture backed european software vendor specializing – in software lifecycle management– the detection of open source

Components

Antelink helps you keep control of your software integration and supply chain in a globalized world.


Open Compliance Program Software Package Data Exchange

Software Quality Assurance and Trustworthiness (SQUAT)

+3.000 projects / +10.000 users

About Antelink


About Antelink





Table of Content


Open Source has gone mainstream

}


Open Source has gone mainstream

By 2013, 90% will include OSS as part of their IT strategy

Melinda-Carol Ballou

Program Director Application Life-Cycle Management & Executive

Strategies." This continues the existing trend for combining internal IT resources with contractors, both onshore and offshore providers, and use of Open Source."


Developers

Software Factory

compile

test

integration test

package

analysis

Developers

Software Factory

compile

test

integration test

package

analysis

Developers

Software Factory

compile

test

integration test

package

analysis

Product

Final product

Product

Final productBill of Material

Product

Final product

Product

Final product

Authors

Leading to a dramatic increase in complex sourcing


About Antelink





Table of Content


Know what is in your code ...

Your Code

Internallydeveloped

Third partyOpen Source

OutsourcedDevelopment

Third partyCommercial

? ???

Origin


… keeping control of your software integration and supply chain

compile

test

integration test

package

analysis

LawyerBuild Engineer

Build Engineer CustomerDevelopers

Product

Final product

Bill of Material Final product Production(deployment)

Software Factory


Bill of Material

Authors

PerceivedLegal

Situation

AutomatedLegal Situation

MiningVS

IncreaseLegal Quality

Save time

Ease communication

Address licensing issues analyzing the legal situation

LegalSituation

=


A reference from


Identify security vulnerabilityManage version updates


About Antelink





Table of Content


Avoid late charges and budget-overrunReduce operation loss


How to enforce your open source policyPreventive vs curative approaches

Preventive Curative

As often as possibleIntegrated in the continuous

integration process

At the end of the release process

When a major event occurs


Preventive vs curative approachesPros …

Preventive Curative

Avoid late charges and budget over-runReduce operation loss

Cover short/mid/long term risksIntegrated to the quality process

You pay when it is REALLY worth itFew people are involved (audit team)


Preventive vs curative approaches… and cons

Preventive Curative

Need affordable toolsNeed tools with very few false-positiveNeed different tools for different users

More expensive (tools + remediation)Done in emergency (lot of stress)Will cover only short term risks

May be too late ...


Be pro-active, empower as soon as possible

everyone involved in the software lifecycle to

mitigate risks that can doom your software

assets.

Want to try one of them ?Want to try one of them ?Don't wait until there is a fire at home


About Antelink





Table of Content


Antepedia : The world's largest Knowledge Base of open source projects

More than 1,000,000 open source reusable components … and counting

+1,000 projects each day


Antepedia : The world's largest Knowledge Base of open source projects


Antepedia Search http://www.antepedia.com

Cloud serviceSingle

file

Original project

License information

Release date and location


Life of open source project is also complex


http://jwebmail.sourceforge.net/news.html

http://jwebmail.sourceforge.net/about.html

http://sourceforge.net/projects/jwebmail/

Inconsistent License Information

28© Copyright 2010-2011 Antelink SAS Smart Apps for Great Development Teams !

Visit our web site http://www.antelink.com

Try Antepedia http://www.antepedia.com

Contact us [email protected]

Tel: +33 (0)1 42 39 30 78 18, Rue Yves Toudic 75010 Paris 10ème, France

Contact information

http://www.antelink.com/

http://www.antepedia.com/

mailto:[email protected]

http://maps.google.fr/maps?q=18+rue+yves+toudic+paris&oe=utf-8&client=firefox-a&ie=UTF8&hq=&hnear=18+Rue+Yves+Toudic,+75010+Paris,+%C3%8Ele-de-France&gl=fr&z=16

antelink presentation at eole 2011, barcelona, spain

Technology