Software Scanning Workshop:
Open Source License Compliance with FOSSology

Thursday, October 17, 2019
TP ConferenceCenter, Technologiepark Heidelberg
Im Neuenheimer Feld 582, 2nd floor
69120 Heidelberg/Germany
10:00 - 17:00

Agenda - Registration - Map -  Presentations (member or participant login required)

Nearly all Open Source licenses have a common set of license obligations that is to forward the license text, a warranty disclaimer in favor of the original authors and a list of copyright notices. In the good old day where software was developed by a small number of authors and there were only a small number of different licenses this was relatively easy to fulfill: Have a quick look at the license, copy and paste the names of copyright holders and locate the warranty disclaimer if not already included in the license. These three elements could then be handed over to the customer in print but could also easily be included into the software. Today, however, these good old days are gone, since there are software packages written by more than 10,000 contributors and including up to hundred and more different licenses. Even if someone deliberately would undergo the enormeous work to collect all this information manually, it would still include the risk that something was forgotten, and, unfortunately, under a very strict point of view a single forgotten element of this information may already consitute a license infringement. Thus, the only solution is to use automated tools to extract certain information from software that must be obtained in order to correctly fulfill the license obligations. In addition, it is not sufficient to just use this tool once, but it must be integrated into a company's processes to provide continuous integration. Finally, even when this is achieved the tool should allow to supervise not only a single department of a company but all departments that require such tools and should provide a synergy of departments. The latter clearly asks for a client server concept of such a tool and one of the best suitable tools for this purpose is FOSSology.

The large number of features and configurations of FOSSology makes it a bit difficult for every individual to get acquainted with it, and it therefore was evident that a number of OSADL members requested that a workshop be organized. Such Software Scanning Workshop will take place on October 17, 2019 in Heidelberg/Germany and we are very pleased that Dr. Michael Jaeger, one of the maintainers of the FOSSology project and co-lead of the Eclipse SW360 project, and Dr. Miriam Ballhausen, Lawyer and Counsel at Bird & Bird, accepted our invitation to contribute to the workshop as trainers and speakers.

The Workshop will contain two parts, the first part in the morning will shed some light on the theoretical background and principles of software scanning while the afternoon session will invite participants to do some practical exercise on a provided server with a number of preinstalled software packages to be scanned.

This workshop is recommended for anybody, who is interested, be it by personal or by professional reasons, in learning the theory, the background and the practice of software scanning in order to obtain license compliance. This comprises but is not limited to software developers, project managers, Open Source officers, legal consultants, employees of purchase departments, etc.

In order to actively participate in the practial exercises offered in the afternoon session of the workshop, participants are invited to take along with them a standard notebook that runs any operating system, provides wireless LAN access and runs an Internet browser to access the locally installed FOSSology server.

• Employees of regular OSADL members, associate OSADL members and academic OSADL members: free access (please select the check box "OSADL member" when registering)

• Regular workshop fee for non-members: EUR 800 (please select the check box "None" when registering). An invoice will be sent to the given address shortly after the registration. 

All given prices are net prices per person exclusive VAT.

We are sorry, but the Software Scanning workshop is already fully booked and registration is no longer possible. We consider to offer a follow-up workshop next year.

When you register for participation at the event you agree that the personal data you enter in the registration form will be processed at OSADL (see OSADL privacy policy).

You may revoke this agreement at any time by email, mail or phone using the communication data provided at the OSADL imprint page but this will also cancel your registration.

Software Scanning Workshop: Open Source License Compliance with FOSSology

09:30 – 10:00 Get together

10:15 – 10:45 Overview of the legal aspects of Open Source license obligations and scanning, Dr. Miriam Ballhausen

10:45 – 11:15 "Scanning" - One word for two different things, Dr. Carsten Emde

11:15 – 11:30 Coffee break

11:30 – 12:00 OSADL Checklists Project: Fulfilling Open Source license obligations - Can checklists help?, Caren Kresse

12:00 - 12:30 The FOSSology Project: History and current status, Dr. Michael C. Jaeger

12:30 – 13:30 Lunch break

13:30 – 14:00 Overview of the scope of functions of FOSSology, Dr. Michael C. Jaeger

14:00 – 15:00 Practical exercises on notebooks brought along or on the so-called Scanbooks provided by OSADL - Part 1, Dr. Michael C. Jaeger, Dr. Carsten Emde, all

15:00 – 15:30 Coffee break

15:30 – 16:15 Practical exercises on notebooks brought along or on the so-called Scanbooks provided by OSADL - Part 2, Dr. Michael C. Jaeger, Dr. Carsten Emde, all

16:15 – 16:45 The next step: Component catalogue, product BOM and Eclipse SW360 - Demo component management, Dr. Michael C. Jaeger

16:45 – 17:00 Questions and answers, discussion, All

Download the agenda as PDF file

The presentations of the workshop are available here (member or participant login required).

• Dr. Miriam Ballhausen, Lawyer and Counsel, Bird & Bird
• Dr. Carsten Emde, General Manager, OSADL
• Dr. Michael C. Jaeger, Co-Maintainer FOSSology Project and Co-Lead Eclipse SW360 project
• Caren Kresse, Compliance and Technology, OSADL

The workshop language is English. The presentation material will be in English, too.

For accommodation, please find a list with some hotels quite close to the workshop location here:

Auerstein Hotel (approx. 1,5 km)
Dossenheimer Landstraße 82, 69121 Heidelberg
Phone: +49 6221/64 99 700, Email: info@auerstein.de,
Homepage

IBIS Hotel Hauptbahnhof (approx. 2 km)
Willy-Brandt-Platz 3, 69115 Heidelberg
Phone: +49 6221 9130, Email: H1447-RE@accor.com,
Homepage

Hotel NH Heidelberg (approx. 2,5 km)
Bergheimer Str. 91, 69115 Heidelberg
Phone: +49 6221 13270
Homepage

Star Inn Hotel & Suites Premium Heidelberg, by Quality (approx. 3 km)
Speyerer Straße 9/ Gottlieb- Daimler- Straße, 69115 Heidelberg
Phone: +49 6221 36 00 0, Email: heidelberg@starinnhotels.com,
Homepage

Hotels located in Heidelberg old-town:

Hotel Weisser Bock (approx. 3,6 km)
Große Mantelgasse 24, 69117 Heidelberg
Phone: +49 6221 90000, Email: info@weisserbock.de
Homepage

Hotel Kulturbrauerei Heidelberg (approx. 4 km)
Leyergasse 6, 69117 Heidelberg
Phone: +49 6221 502980, Email: info@heidelberger-kulturbrauerei.de
Homepage

Venue:
The Security Innovation Workshop will take place at the TP ConferenceCenter im Technologiepark Heidelberg (TP ConferenceCenter at Heidelberg Technology Park), Im Neuenheimer Feld 582 in 69120 Heidelberg/Germany.

By car:
A map to calculate directions to the TP ConferenceCenter im Technologiepark Heidelberg is available here. A limited number of parking spaces is available and will be reserved for workshop participants.

Public transportation:
The TP ConferenceCenter im Technologiepark Heidelberg is located about 2.5 kilometers away from Heidelberg main railway station. From there, the electric tram line RNV 24 direction „Handschuhsheim” takes about seven minutes (Please note that due to a major contruction site at Heidelberg main railway station, the tram departure station has been moved to stop "Hauptbahnhof West"). Please leave the tram at stop „Technologiepark”. The ConferenceCenter can be reached from there in a short walk. How to get to TP ConferenceCenter by public transportation. 

Please do not hesitate to contact us in case you have further questions:
Andrea Ruf
officeªosadl.org
Phone.: +49 6221 98504 13