1. Open Source in Enterprises
蔡俊杰（Jack Cai）
IBM China Development Lab
仅为个人思想，不代表IBM立场或观点

2. Agenda
n Open source & Enterprise
n Using open source software
¡ Risks & Suggestions
n Joining open source development
¡ Risks & Suggestions

3. OSS is pervasive in enterprises
n Actaute survey [1] n Gartner survey[2]
Oct. 2009 Nov. 2008
15%
85%
【1】http://www.actuate.com/download/OpenSourceSurvey/oss2009.pdf
【2】http://www.gartner.com/it/page.jsp?id=801412

4. Enterprises are pervasive in OS
n Two good examples
¡ Linux kernel
contribution
break-down [1]
Company
n 186 companies Personal
contributed to v2.6.24 Unknown
¡ Microsoft turnaround
n Platinum Sponsor of
ASF in 2008 & 2009
n Contributed code to a
number of open
source projects,
including Linux Kernel
in July 2009!
Microsoft
【1】https://www.linuxfoundation.org/publications/linuxkerneldevelopment.php

5. Enterprise roles in OS
n User
¡ Run for daily operation
¡ Incorporate into product/service
n Development contributor
¡ Code donation
¡ Employee participation
n Leader
n Service provider
¡ Technical support
¡ Consultancy: legal, process, risk
assessment, …
¡ Education/Training
¡ Solution/Integration
n Sponsor
¡ Fund, facility/infrastructure,
software, …

6. Agenda
n Open source & Enterprise
n Using open source software
n Joining open source development

7. OSS Benefit & Cost
n High quality n Service availability
n Zero license fee n Skill requirement
n Openness/Freedom n Migration cost
n Flexibility n Training cost
n Transparency n Legal risk

8. Mitigating the system risks
n Set up a governance system
¡ Determine the strategy (position, risk
preference, etc.)
¡ Set up adoption review/approve process
¡ Set up daily management system
n A central approved list/repository
¡ Conduct education

9. Legal risk in using OSS
n Copyright
¡ Uncertain “pedigree”, SCO case
¡ Contamination
n Patent
¡ Possible patent infringement, MS v.s
Linux case
n License
¡ Copy-left, Cisco Linksys case

10. Mitigating the legal risks
n Do due-diligence investigation
¡ Source code scan
¡ Author background investigation
n Get professional legal advice
n Buy service

11. Evaluating OSS maturity
n Outstanding leaders
n Diversified community
n Wide user base
n Active development
n Mature vulnerability management
n Well-written documentation

12. Usage pattern
n Run for internal use
¡ Most cases
n Run to provide service to 3rd parties
¡ Most Internet service companies,
including Google
n Redistribute to 3rd parties
¡ Product
¡ Solution Caution!

13. Customization pattern
n Take and fork
¡ IBM Lotus Symphony
n Collaborative development
¡ IBM & Eclipse
¡ IBM WebSphere Community Edition &
Apache Geronimo
n Some point in-between
¡ Google: Apache Harmony, Linux

14. Agenda
n Open source & Enterprise
n Using open source software
n Joining open source development

15. Motivations
n Redistributing
n Providing service
n Driving standards
n Disrupting competition
n Building eco-system
n User centered design

16. Legal risks in joining OSS dev
n Contamination & Virus effect
n Patent exposure
n Mitigation suggestion
¡ Draw a fine line between proprietary code
and open source code, set up
review/approve process as required
¡ Conduct necessary education

17. Infrastructure support
Open Source
Community 3. Check in/out
External community
code repo
4. Smart Merge
2. Create Patch
5. Notify
1. Check in/out
Internal code repo Merge Log and
Continuous
Developer Integration
workstations

18. Internal open source
n Run projects inside an enterprise in an
open source way
¡ 20% project?
¡ Innovation incubation

19. Community-driven
Commercial development
n Open development
¡ Source code available
¡ Transparent development
¡ User interaction
n Commercial license
n Examples
¡ Project Zero (http://www.projectzero.org/)
¡ Rational Jazz (http://jazz.net/)

20. Summary
n Open source is pervasive in
enterprises, and enterprises have
become the key driver of open source.
n Use open source with caution.
n Join in open source development with
caution.

21. Our open source book, coming soon

22. Q&A