Black Duck Software Whitepapers

Whitepapers


A Breakthrough in Software Supply Chain CommunicationsA Breakthrough in Software Supply Chain Communications

This whitepaper explains how using a standard format, everyone in the supply chain from engineering to business managers, can now speak the same language as regards the contents of your software. Negotiations will be easier and issues can be resolved between technical and non technical decision makers, paving the way for faster time to market.

Download whitepaper  (PDF)


A Guide to Software Encryption Export ComplianceA Guide to Software Encryption Export Compliance


In this whitepaper we explain why you need to identify all of the encryption functions in your software – and the challenge that poses. Then we explain the need for an automated means to identify encryption functions and to guide you through the compliance process. Finally, we describe how Black Duck’s exportIP system helps make your job easier.

Download whitepaper
  (PDF)


Best Practices for Managing Software Intellectual Property in an Open Source World

Best Practices for Managing Software Intellectual Property in an Open Source World

This whitepaper draws on the experiences of the Black Duck Software team, our customers, and other industry experts to propose new approaches to managing intellectual property in this new world. It describes a set of Best Practices that companies can use to avoid the risks and gain the benefits of this promising new approach to software development.

Download whitepaper  (PDF)


Open Source Policy: WhitepaperCreating and Implementing An Open Source Policy: Five Steps to Success

 

Bernard Golden, Chief Executive Officer, Navica presents a five phase process, which provides companies a way to implement their own Open Source Policy.

Download whitepaper  (PDF)


GPLv3 Summary

 On Friday June 29th, the Free Software Foundation announced the release of GPL (General Public License), version 3. This much anticipated version is the sequel to the commonly used GPL v2.

This paper offers a summary of the most significant terms of the GPLv3 license.

Download paper (PDF)


Software Compliance Management WhitepaperSoftware Compliance Management: Automating License Compliance in the New, Mixed-IP Development World

This whitepaper educates companies about the challenges and benefits of working in a mixed-IP World and how software compliance systems are helping to unlock the potential of modular, collaborative development to significantly enhance profitability, reliability and ROI.

Download whitepaper  (PDF)


Encryption Export Considerations WhitepaperSoftware Encryption Export Considerations

Ben Flowe, who leads the export/import compliance team at Berliner, Corcoran & Rowe, LLP in Washington, DC explains how to approach classification of products with encryption functions by applying the current Export Administration Regulations (EAR) provisions, from the least restrictive through the most restrictive controls.

Download whitepaper  (PDF)


Encryption Export Considerations WhitepaperString Search and You May Find

This paper describes the pros and cons of string search to determine code origins, and issues with interpreting string search results. The paper then describes how code analysis based on fuzzy matching against a comprehensive code database leads to a superior outcome.

Download whitepaper  (PDF)


Due Diligence WhitepaperThe New Due Diligence Assessing and Protecting Your Software Asset Value in Mergers, Acquisitions and Financing Rounds

The goal of this whitepaper is to make all parties involved in technology Merger & Acquisition (M&A) or funding events aware of software compliance management solutions, and how they can help organizations achieve their business goals.

Download whitepaper  (PDF)


Due Diligence WhitepaperThe Quest for an "Open Source Genome"

This paper describes how the “open source genome” concept can be useful in understanding the origin and history of your code. We explore the nature of open source, why and how software developers use it, how information from an open source genome can help identify open source in your code and establish its origins, and why that is important.

Download whitepaper  (PDF)