• Open Source SIG: Code Scans Thursday, January 12, 2006 - 06:00PM
    DLA Piper Rudnick Gray Cary LLP.
    2000 University Avenue (note: These are the tall buildings on the corner of University Ave. and Woodland, west of Hwy. 101)
    East Palo Alto, CA 94303
    Software Architecture and Platform

Share This Event

Open Source SIG: Code Scans

REGISTRATIONPriceQuantity
$15.00
$0.00

Description

  • The Monthly Meeting of the Open Source SIG


     

    Presentation Overview:

    SDForum Open Source SIG looks at the evolving field of code scans. Please join us for a presentation by Palamida on avoiding copyright infringement, and for a presentation by Coverity on detecting and preventing vulnerabilities. Find out first hand how these state of the art tools automate important aspects of ensuring source code quality and integrity.


     

    First Presentation:

    Code Scanning for Open Source Security and Quality Control

    As Linux and open source move into the enterprise, interest in security among enterprise IT managers is increasing. Unfortunately, there is a severe shortage of information on how to quantify security and code quality of an operating system. A few analysts suggest that Windows has better security than Linux. Seth Hallem presents Linux security based on an exhaustive four-year analysis conducted by Stanford University and Coverity, plus other high-profile open source projects recently scanned, such as MySQL and FreeBSD.
     

    Seth Hallem, CEO

    Seth Hallem has helped grow Coverity from its inception. Working with the Stanford Computer Science Laboratory team under Dr. Engler, he was one of the principal architects and implementers of Coverity’s source code analysis product. Seth has published articles in leading industry publications and academic conferences on the topic of source code analysis.


     

    Second Presentation:

    Code Scanning for Open Source License and Copyright Compliance

    Open source presents both significant opportunity and risk for hardware and software vendors. An audit of a code base can identify potential license problems so companies can avoid unintended effects of the GPL and other reciprocal open source licenses. Often part of M&A transactions and financings, an automated code scan provides the most objective, timely, and cost effective approach to due diligence. Jeff Luszcz, co-founder of Palamida talks about his experience in performing audits and developing Palamida's scanning software.
     

    Jeff Luszcz, Vice President of Services and Support

    Jeff Luszcz is a co-founder and responsible for the original product concept at Palamida. He has previously held senior engineering positions at Cacheon and NASA Ames Research Center. Throughout his career Jeff has been active in the Java, Macintosh and open source software communities, as well as being a writer and technology editor.
     

    Event Logistics

    Location

    DLA Piper Rudnick Gray Cary LLP.
    2000 University Avenue (note: These are the tall buildings on the corner of University Ave. and Woodland, west of Hwy. 101)
    East Palo Alto, CA 94303
    Tel: 650.833.2000

    Agenda

    6:00 - 6:30 p.m. Registration/Networking
    6:30 - 8:30 p.m. Presentation
     

    Cost

    $15 at the door for non-SDForum members
    No charge for SDForum members
    Please call 408.494.8378 for student memberships
    No registration required