基于FLOSS自由/开源软件的计算机取证应用探讨

FLOSS(Free/Libre and Open Source Software)又叫做自由/开源软件,它被证实为当今最好的开放、合作、国际化产品和开发样例之一,已经为全世界各大机构,包括政府、政策、商业、学术研究和开源领域带来巨大的利益。本文将讨论应用开源软件进行计算机取证的优势,探讨开源的、非商业性的取证软件在某些方面更加适合进行计算机取证的原因。     

开源软件在世界经济中的角色

本文基于欧盟首个对开源软件产业的研究报告——《开源对欧盟软件通信产业竞争力和创新的影响》，在获得欧盟FLOSS项目组负责人Rishab Aiyer Ghosh先生及欧盟相关负责人的同意后，欧盟QualiPSo开源软件竞争力中心对报告进行了节选、编译和增补。通过该报告，我们可以了解欧盟对开源软件产业的研究成果，这对于规划和实施我国开源软件战略具有重大的借鉴作用。为此，我们还将分期连载部分重要内容，包括开源软件对欧盟国家直接的经济影响和间接影响，以及对趋势、方案和公关方针策略的分析。     

有关开源软件许可证的分析与探讨

近年来,我国开源软件得到不断发展,并取得了辉煌可观的成绩,但开源软件的使用是存在限制的,有着不同的授权许可。因此,为了使我国的开源软件能够健康发展,需要对开源软件的许可证进行严格的审查。本文就开源软件许可证的常见分类、开源软件许可证与著作权法之间的平衡、开源软件许可证受到专利侵权时应采取的应对措施、以及对我国的开源软件许可证的建议进行分析。     

开源技术——大学计算机专业的一门重要课程

分析开源技术在大学计算机专业教育中的重要性,阐述开设开源技术课程的5方面理由。根据教学实践,提出开源技术课程的定位以及在理论和实践两方面的内容和目标,给出促进开源教育的建议。     

对开源发展现状及未来的探讨

通过开源软件历史发展过程的回顾,及当前开源软件的发展现状及趋势的论述,得出了开源软件和开源思想的发展前景,并将在其他领域得到进一步发展。     

开源许可证合规性研究

随着开源概念的逐步深入,开源软件成为软件发展的潮流.同时,开源软件的使用受各类开源许可证约束.开源参与者在开发过程中该如何为自己的开源软件选择合适的许可证,确保高效合理地使用社区群体智慧劳动成果,仍是一个亟需解决的问题.为此,首先分析和解读了开放源代码促进会认证的常用开源许可证,通过对许可证条款内容和结构的研究,得到开源许可证框架及许可证兼容性推导模型,并将该模型应用于对我国自主研发的木兰宽松许可证的分析和解读.最后,基于上述工作研发了开源许可证选择工具,为开源开发者对许可证的理解和合规使用提供了参考和决策支持.     

开源对软件人才培养带来的挑战

开源是世界信息技术及产业发展的重要方向,然而,面对开源进一步繁荣发展的需求,开源人才的供应无论在质或量上均存在较大不足。文章分析开源发展及开源人才的现状,剖析开源人才的能力特点及其培养需求,对开源软件人才的培养实践进行总结,并提出对未来教育实践的展望。     

基于OMM的开源软件质量自动评估的研究*

随着开源软件的广泛应用,开源软件的开发者和使用者迫切需要一个质量评估模型来改善开源软件的开发过程,提高开源软件的质量保证。基于欧盟第六框架重大项目开源软件质量保障平台(QualiPSo)提出的开源软件成熟度模型(opensource maturity model,OMM),设计开发了一个软件过程自动评估原型系统,实验结果证明了该系统的可行性和有效性。     

Summarization on Software Reliability for Open Source Software

随着网络技术的迅猛发展,开源软件正以前所未有的优势得以快速发展.现在的开源软件已经成为软件发展的主要流行趋势.而开源软件的可靠性则成为开源软件发展的重要目标.在研究开源软件可靠性模型的基础上,对开源软件可靠性模型参数估计、可靠性和评测标准进行了论述,然后对开源软件期望努力和版本更新时间也进行了相应的研究.     

软件专利与开源软件发展

软件获得版权与专利的双重保护。正在引起软件产业尤其是开源软件业界的广泛关注。许多开源软件的支持者。包括Linus Torvalds本人明确反对软件专利制度。他们认为。软件专利会给开源软件的发展带来麻烦。鉴于开源软件对于中国软件产业发展的重要意义。应当研究软件专利制度以及其对开源软件发展的影响。[编者按]     

Identifying exogenous drivers and evolutionary stages in FLOSS projects

The success of a Free/Libre/Open Source Software (FLOSS) project has been evaluated in the past through the number of commits made to its configuration management system, number of developers and number of users. Most studies, based on a popular FLOSS repository (SourceForge), have concluded that the vast majority of projects are failures.This study’s empirical results confirm and expand conclusions from an earlier and more limited work. Not only do projects from different repositories display different process and product characteristics, but a more general pattern can be observed. Projects may be considered as early inceptors in highly visible repositories, or as established projects within desktop-wide projects, or finally as structured parts of FLOSS distributions. These three possibilities are formalized into a framework of transitions between repositories.The framework developed here provides a wider context in which results from FLOSS repository mining can be more effectively presented. Researchers can draw different conclusions based on the overall characteristics studied about an Open Source software project’s potential for success, depending on the repository that they mine. These results also provide guidance to OSS developers when choosing where to host their project and how to distribute it to maximize its evolutionary success.     

Understanding group maintenance behavior in Free/Libre Open-Source Software projects: The case of Fire and Gaim

In this paper, we investigate group maintenance behavior in community-based Free/Libre Open-Source Software (FLOSS) development teams. Adopting a sociolinguistic perspective, we conceptualize group maintenance behavior as interpersonal communication tactics—specifically, social presence and politeness tactics—that help maintain relationships among group members. Developer email messages were collected from two FLOSS projects with different development statuses, and their content was analyzed to identify frequently used group maintenance tactics. We then compared the group maintenance tactics used in the two projects, finding differences that reflect changes in the project work practices. Our work theoretically contributes to FLOSS research and has practical implications for FLOSS practitioners.     

A Methodological Framework for Socio-Cognitive Analyses of Collaborative Design of Open Source Software

Open Source Software (OSS) development challenges traditional software engineering practices. In particular, OSS projects are managed by a large number of volunteers, working freely on the tasks they choose to undertake. OSS projects also rarely rely on explicit system-level design, or on project plans or schedules. Moreover, OSS developers work in arbitrary locations and collaborate almost exclusively over the Internet, using simple tools such as email and software code tracking databases (e.g. CVS).All the characteristics above make OSS development akin to weaving a tapestry of heterogeneous components. The OSS design process relies on various types of actors: people with prescribed roles, but also elements coming from a variety of information spaces (such as email and software code). The objective of our research is to understand the specific hybrid weaving accomplished by the actors of this distributed, collective design process. This, in turn, challenges traditional methodologies used to understand distributed software engineering: OSS development is simply too “fibrous” to lend itself well to analysis under a single methodological lens.In this paper, we describe the methodological framework we articulated to analyze collaborative design in the Open Source world. Our framework focuses on the links between the heterogeneous components of a project’s hybrid network. We combine ethnography, text mining, and socio-technical network analysis and visualization to understand OSS development in its totality. This way, we are able to simultaneously consider the social, technical, and cognitive aspects of OSS development. We describe our methodology in detail, and discuss its implications for future research on distributed collective practices.The order of the co-authors names is not significant.     

Survival analysis on the duration of open source projects

ContextOpen source (FLOSS) project survivability is an important piece of information for many open source stakeholders. Coordinators of open source projects would like to know the chances for the survival of the projects they coordinate. Companies are also interested in knowing how viable a project is in order to either participate or invest in it, and volunteers want to contribute to vivid projects.ObjectiveThe purpose of this article is the application of survival analysis techniques for estimating the future development of a FLOSS project.MethodIn order to apply such approach, duration data regarding FLOSS projects from the FLOSSMETRICS (This work was partially supported by the European Community’s Sixth Framework Program under the Contract FP6-033982) database were collected. Such database contains metadata for thousands of FLOSS projects, derived from various forges. Subsequently, survival analysis methods were employed to predict the survivability of the projects, i.e. their probability of continuation in the future, by examining their duration, combined with other project characteristics such as their application domain and number of committers.ResultsIt was shown how probability of termination or continuation may be calculated and how a prediction model may be built to upraise project future. In addition, the benefit of adding more committers to FLOSS projects was quantified.ConclusionAnalysis results demonstrate the usefulness of the proposed framework for assessing the survival probability of a FLOSS project.     

开源软件在军事训练中的应用

在新军事变革中,军队的武器装备、作战方式等许多方面都发生了重大变化,在军事训练方面就要适应这种变化。将开源软件应用于军事训练是一种高效、节省的好方法。     

教育信息化领域中开源软件的应用策略研究

开源软件因其源代码开放、免费、易于定制等特性,非常适合教育信息化领域的需求。文章阐述了开源软件的概念及特征,分析了开源软件在国内外教育领域中的研究与应用现状,最后提出了开源软件在我国教育信息化领域中的应用策略。     

开源软件供应链安全问题研究

当前,开源已经成为软件开发的重要模式之一。由于开源开发模式具有代码来源多样、依赖关系复杂等特点,使得开源软件面临代码漏洞风险、供应链攻击风险、知识产权风险、可持续维护风险等供应链安全问题,且问题呈现出快速增长态势。本文基于对开源软件供应链中的安全风险分析,提出从开源软件安全漏洞检测、软件成分分析、许可证冲突检测、开源生态可持续治理四个方面进行安全治理的方法,指出构建安全软件供应链面临依赖关系复杂、结构脆弱等挑战,对软件成分分析、供应链构建等未来研究方向进行了展望。     

Virtual communities as a resource for the development of OSS projects: the case of Linux ports to embedded processors

Open source software (OSS) projects represent a new paradigm of software creation and development based on hundreds or even thousands of developers and users organised in the form of a virtual community. The success of an OSS project is closely linked to the successful organisation and development of the virtual community of support. The main objective of this article is to analyse the activity of virtual communities. Social network analysis is employed to analyse Linux ports to embedded processors as a case study to achieve this aim. The obtained results confirm the necessity of structuring the virtual community with a selection of active developers and core members to promote community activity and attract peripheral users, expanding the impact of the underlying software. The obtained result will be useful for the software industry migrating to the open source software paradigm.     

开源软件自动化评估证据框架

互联网上已形成了规模巨大、种类丰富的开源软件资源。如何准确、快速地判断一个开源项目的各种可信属性是否满足需求是当前软件工程领域研究的热点。深入分析已有开源软件评估模型,总结互联网上软件质量相关的各种信息,提出了面向开源软件的可信评估证据框架,并基于该框架构建了一种开源软件可信证据查询平台。利用该平台能够极大地提高评估效率,用户可以准确、快速、全面地了解相关软件项目的各种信息。最后,以一个知名开源软件证实了该证据框架及证据查询平台的可行性。     

面向开源生态的软件数据挖掘技术研究综述

全球开源软件生态中孕育的大众化软件生产模式正快速形成一种新型的软件生产力,在软件开发和应用各个环节发挥了巨大作用.大众化软件生产的数据规模日趋庞大、协同范围不断扩展、管理模式高度精简,这些全球化特征使其在软件复用、协同开发、知识管理等环节面临诸多挑战,迫切需要新的理论指导和工具支持.本文首先界定了大众化软件生产活动的分布范围、基本过程和数据形态,然后从软件复用、协同开发、知识管理三个核心环节对开源社区数据挖掘技术的研究工作进行了归类与分析,最后总结了该领域研究工作存在的问题和未来发展趋势.