How much open source software are businesses really using?

By Jacqueline Emigh | Published December 12, 2007, 12:28 PM

Open source vendor OpenLogic is today kicking off a new industry initiative meant to help both users and software companies find out precisely what kinds of open source software is being used -- and who is using it.

Software developers are downloading lots of open source software from the Internet, and much of that is free of charge -- but what, exactly, are they downloading? OpenLogic, Inc. is today rolling out a new industry initiative called the Open Source Census which is aimed at answering that question for developers, their employers, and software vendors.

Despite efforts to clear up the confusion, many enterprises and other businesses today aren't at all clear about which open source software packages are actually installed on their systems, said Kim Weins, OpenLogic's senior vice president, Products and Marketing, in an interview with BetaNews.

For instance, one of OpenLogic's customers, a large manufacturing firm, thought it was operating only about 20 or 30 open source software packages. But upon running OpenLogic's Discovery software, released last June, the manufacturer actually detected around 220 of these open source packages. "That's an order of magnitude of difference," pointed out Weins.

Unlike commercial software packages from Microsoft and many other vendors, open source software provides an open software code base with reusable software components. Commonly, software developers from businesses and voluntary organizations work together in collaborating on the software -- which is often Linux-based -- in open source development communities.

Open source software is becoming increasing popular among a number of end users, but particularly in enterprises, where developers in industries such as financial services, telecommunications, and manufacturing often tweak downloaded open source code to create custom applications designed to meet specific business goals or to differentiate themselves from their competitors.

In the first phase of the Open Source Census initiative, OpenLogic is today launching OSS (Open Source Software) Discovery, a new version of the software tool first issued in June. Like its predecessor, OSS Discovery is a free download, according to Weins.

Aside from adding an open source license, the new OSS edition provides an open source plug-in architecture with built-in "fingerprint" rules for identifying open source software packages.

In its second phase, set to start in the first quarter of next year, the Open Source Census will begin to collect data from enterprise developers who want to take part in the project. OpenLogic also expects to release a list of other open source software vendors that will serve as partners in the initiative,

To motivate information sharing, the Open Source Census will offer access to the collected data at various layers of participation or contribution, according to Weins.

"You can look at this as sort of like a salary survey. At the first level, you can contribute information anonymously, and you'll also be able to see 'counts' of the software packages) that others have found," she illustrated.

At a second layer, users who opt in to identify themselves will be able to view "all of their own data summarized -- and they'll also get to see their data compared with that of others -- how open source software is being used in the total ecosphere, in their own industry, and among their competitors," Weins said.

Data to be collected on a voluntary basis includes the name of the company, size of the company, and geographic information, for example.

"But the third layer (of access) is for (open source vendor) partners," according to the senior VP. Open source vendors and large ISVs (independent software vendors) joining in will have "extra" access to the Open Source Census database repository for analyzing and "slicing and dicing" information.

Although participation in the census project will be free to developers and enterprises, software vendor partners will be charged a contribution combining "cash and a 'in kind' contribution such as hardware or software," she said.

The money contributed by software vendor partners will be used to support operations of the database repository, according to Weins.

Weins said that OpenLogic expects to benefit from the initiative mostly by exposing developers and enterprises to its own library of about 300 open source packages, some of which are used for software "governance," or policy compliance.

Although many enterprises are already trying to govern the use of open source software by setting up lists of "approved" software, these attempts don't always work, Weins contended.

For instance, another customer who used OpenLogic's original Discovery package -- a large telecommunications firm -- went into the exploration process with several hundred open source software packages on its "approved list."

"They found 250 different open source packages -- but only one-third of those had been approved," she explained.

A business might deal with results such as these by either adding the newly discovered software packages to its "approved" list or by stopping developers from using those packages, according to Weins.

On the other hand, she suggested, software developers might leverage the results to find other developers who are working on similar open source projects for purposes of collaborative development.

Developers can use the tool starting today under the GNU Affero General Public License (GPL) version 9.

Although OpenLogic doesn't expect to release the names of its vendor partners in the census project until January, a press release today announcing the Open Source Census contains statements of support from officials of several open source software vendors, including Andrew Aitken, CEO of the Olliance Group; Bill Portelli, CEO of CollabNet, and Jim Jagielski, CTO of Covalent Technologies and chairman of the Apache Software Foundation (ASF)'s Board of Directors.

In addition, CollabNet -- the company which is also behind other popular open source community sites such as Sun Microsystems's java.net -- is hosting the new free download site for OSS Discovery here.

Also today, OpenLogic is sending out an invitation to open source vendors and large ISVs to participate, on its new Open Source Census Project Web site.

Comments

Every software my company uses we look to OSS first.

Score: 0

|

There are stupid companies too though.
Like a lot of Japanese companies here disapproves free softwares, that even if it's free, they don't feel comfortable unless they pay the author something.

It's about trust I guess.
A lot of people just don't trust free stuff.

Score: 0

|

The factor that separates open source and a stakeholder source is security.

Microsoft has a team and a large expense account to test its software against vulnerabilities.

However, open source doesn't have that luxury "by a long shot". Covert code writers working for businesses and subgovernments that engage in corporate espionage would find the path of least resistance with open source software.

If I am not mistaken, China has a team and a large expense account engaging in writing covert software and distributed as simple freeware utilities through out the free world.

Score: 0

|

Your analogy is flawed. On one side, you only have Microsoft doing closed source software. On the other side, you have all open source projects. Are you implying that only Microsoft does closed source software? Or that all companies that do closed source software make sure that their products are secure (ha ha)? And that not a single open source project tries to focus on security?

Apache has trounced IIS for many years in stability, robustness, and security.

I suspect you're mistaken. And we don't need more FUD.

Score: 0

|

You are wrong when you say that Open source software are less secure because they don't have the money to pay a team of testers. The opposite is true: every major open source project have a community of developers, testers and users that together makes a more powerful team than Microsoft (or any other closed source company) could ever imagine. This makes the power of Open source, and its ability to rapidly adapt and grow.

Score: 0

|

I think you need to take The Cathedral and the Bazaar off your bookshelf, dust it off and re-read it.

Score: 0

|

For instance, one of OpenLogic's customers, a large manufacturing firm, thought it was operating only about 20 or 30 open source software packages. But upon running OpenLogic's Discovery software, released last June, the manufacturer actually detected around 220 of these open source package

How do they define an "Open Source Package"? The app? Or the app and the 11 other packages it depends on?

Most folks consider Ubuntu an OS. Of course, to someone who might have an agenda to make OSS look more prevalent, Ubuntu might actually show up as hundreds, if not thousands of "OSS Packages".

Score: 0

|

I would consider Ubuntu to be a distro and Linux to be the OS. :)

Score: 0

|

You're joking....or you completely missed the point.

Score: 0

|

Follow the :)

Score: 0

|

Never attribute to stupidity that which can be adequately explained by humour. ...Messageboard's razor.

Score: 0

|

Don't wait for Microsoft's patch: Secure Windows now from today's 0-day

Microsoft is recommending users simply get rid of a vulnerable ActiveX control that no one even uses any more. We'll show you how to do that right now.

Nokia: Android? Are you crazy?

Rumors about new Android devices abound, but Nokia squashes this one.

Symantec goes live with Norton 2010 betas

Norton Internet Security and Norton Antivirus 2010 are now available for testing.

What's Now: Drenched with 'Purple Ra1n,' iPhone users caught eating 'redsn0w'

Plus: Symantec and McAfee go to war, and what's LucasArts building in its top-secret, moon-shaped orbital facility?

In New York, online booze loses a Circuit Court decision

Court worried about gangster influence if liquor purchased directly.

British Telecom sacks bitterly unpopular Phorm ad platform

Phorm under BT is no more, but the targeted ad service could still go on under Virgin or TalkTalk.

CBS is the last man standing against Hulu

Popular streaming syndication site Hulu now has all the major networks in its camp except CBS.

Not just Vista: The operating system is dying, too

Carmi Levy: Wide Angle Zoom Vista's troubles point to a bigger shift that will affect more than just Microsoft.

Bolt: the dark horse mobile browser

Bitstream's small-footprint mobile browser is available in Beta 3

IE8 WSUS update push to begin August 25

After months of availability to users willing to seek it out, Internet Explorer 8 will be rolled into Windows Server...

Geeks vs. journalists: A tale of two worldviews

Recovery with Angela Gunn Why geeks think most mainstream journalism is flaky, and why the mainstream thinks geeks are trying to kill them. (They're both right.)

Can Linux do BitLocker better than Windows 7?

Betanews kicks off a new series with a look at how the Linux operating system's FDE stacks up against BitLocker, the Windows feature that today commands a $120 premium.

Windows 7 ISO Verifier 1.0

July 6 - 5:40 PM ET

ProgDVB 6.10.2

July 6 - 5:19 PM ET

FreeBSD 8.0 Beta 1

July 6 - 4:58 PM ET

K-Lite Codec Pack 64-bit 2.5.0

July 6 - 3:55 PM ET

SysCheckUp 1.4.0

July 6 - 3:34 PM ET