计算机科学 ›› 2020, Vol. 47 ›› Issue (11A): 541-543.doi: 10.11896/jsjkx.200400077

• 软件工程&数据库 • 上一篇    下一篇

混源软件项目中的开源组件影响分析

赵亮   

  1. 军事科学院系统工程研究院系统总体研究所 北京 100101
  • 出版日期:2020-11-15 发布日期:2020-11-17
  • 通讯作者: 赵亮(liangzhao@tsinghua.edu.cn)

Analysis of Impact of Open Source Components in Mixed Source Software Projects

ZHAO Liang   

  1. General System Institute,Department of System Engineering,Military Academy of Sciences,Beijing 100101,China
  • Online:2020-11-15 Published:2020-11-17
  • About author:ZHAO Liang,born in 1971,Ph.D,professor,is a distinguished member of China Computer Federation.His main research interests include software testing,software analysis and software quality assurance.

摘要: 文中研究了混源软件的代码结构特征,按照功能已知性、代码有用性、代码安全性和知识产权属性等4个标准将混源代码空间进行了划分,展示了混源代码独特的代码空间特征;从正反两个方面分析了开源组件对混源项目的进度、质量、成本和知识产权等方面产生的正、反两方面的影响,将许可证根据传染性强弱分为3种类型;通过安全攸关领域开源组件应用的案例调研,展示了开源应用的基本情况,分析了开源组件实际应用中存在的问题。基于以上研究,认为从管理上应该建立开源组件的全生命周期管理机制,加大基于开源的创新,鼓励融入和回馈开源社区;从技术层面,应在项目初期即做好组件的选择,加强产品研发过程管理,并紧跟开源社区做好项目的演化,从而更好地利用开源,促进软件混源项目管理。

关键词: 混源软件, 开源组件, 许可证

Abstract: This paper studies the code structure characteristics of mixed source software,according to four standards,which include function knowledge,code usefulness,code security and intellectual property rights.This shows the unique code space of mixed source code.This paper analyzes the positive and negative effects of open source components on the progress,quality,cost and intellectual property rights of mixed source projects.The licenses are divided into three types according to their infectivity.Through the case study of open source component in the safety critical field software project,the basic situation of open source application is shown,and the problems existing in the practice are analyzed.Based on the above research,this paper brings forward that the whole life cycle management mechanism of open source components,and the innovation based on open source should be strengthened,and encourage integration and feedback to the open source community,from the technical view,we should make careful component selection,strengthen product development process management in the early stage of the project,and closely follow the open source community to product evolution.These can help to make better use of open source component and promote software mixed source project management.

Key words: License, Mixed source software, Open source software component

中图分类号: 

  • TP311
[1] CHANDRASEKARAN A,DRIVER M.What Innovation Leaders Must Know About Open-Source Software[EB/OL].https://www.gartner.com/en/documents/3956651.
[2] Open Source Cloud Alliance for Industry,the White Book onOpen Source Industry (2019) [R].Technical Report,2019.
[3] ZHOU M H,ZHANG W,YIN G.Quantitative analysis of open source software [J].Communications of the CCF,2016,12(2):24-29.
[4] XIA X,WANG X Y,YANG X H,et al.Defect report management and analysis of open source software system [J].Communications of the CCF,2016,12(2):29-34.
[5] CAI W D,LI L.Reflection on open source software and open source community [J].Communications of the CCF,2016,12(2):44-49.
[6] 2019 Open Source security and Risk analysis[OL].https://scan.coverity.com/.
[7] ZHANG D,LUO P.Survey of Code Similarity Detection Methods and Tools[J].Computer Science,2020,47(3):5-9.
[8] https://nvd.nist.gov/vuln/(2020-04-10).
[1] 刘启林,董威,尹良泽,齐璇,杨沙洲.
混源软件质量模型与度量方法研究
Research on Mixed Source Software Quality Model and Measurement Method
计算机科学, 2017, 44(4): 82-84. https://doi.org/10.11896/j.issn.1002-137X.2017.04.018
[2] 张硕,马兆丰,芦效峰,杨义先,钮心忻.
音乐内容动态加密与许可授权系统设计与实现
Design and Implementation of Music Content Dynamic Encryption and License Authorization System
计算机科学, 2011, 38(12): 43-48.
[3] 刘清堂 杨宗凯.
资源的数字权利保护机制研究

计算机科学, 2005, 32(10): 80-83.
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!