Black Duck Software Press Releases RSS

Black Duck Software Awarded Patent for Core Technology That Automatically Resolves Software License Obligations and Conflicts

mwaldron — Tue, 02 Feb 2010 00:00:00 -0500

Black Duck Software Awarded Patent for Core Technology That Automatically Resolves Software License Obligations and Conflicts

Black Duck Suite examines code, mitigates risk and ensures compliance, making open source easier to use

WALTHAM, Mass., February 2, 2010 - Black Duck Software, the leading global provider of products and services for accelerating software development through the managed use of open source software, has been granted a patent protecting core technology that can automatically identify license obligations and resolve license conflicts for legally-protectable content (e.g. software, multimedia, video, audio, textual representations, works of art, visual representations, technological know-how, business know-how, contract rights, and/or software elements, etc.).

US Patent No. US 7,552,093 B2 covers technology at the heart of the Black Duck Suite, a comprehensive management platform for controlling the use of open source in a multi-source development process. The patented technology allows the Black Duck Suite to scan an organization’s code base of open and closed-source software components using various licenses to determine which license obligations are in effect and which licenses obligations may be in conflict.

With this patent, the Black Duck Suite goes beyond competitive offerings, scanning code according to license attributes, restrictions, uses and interactions against the Black Duck KnowledgeBase of hundreds of thousands of open source projects, which use more than 1,800 open source licenses. The Suite provides development organizations with tools that effectively automate the search, selection and compliant integration of open source components, making the low-cost economics of open source available at enterprise scale.

“This patent represents core technology in the pioneering Black Duck application,” said Bill McQuaide, EVP of Products and Strategy, Black Duck Software. “In these difficult times more and more customers are turning to multi-source development using OSS to stretch resources. Open source components are free but all come with license obligations that need to be met,” added McQuaide. “Customers are building new apps and services with dozens or hundreds of components. Black Duck’s technology enables organizations to ‘design in’ compliance and eliminate or minimize potential human error in manual license checking, saving time and money and mitigating legal risk and exposure from unmet license obligations.”

The patented technology is especially powerful when used in large-scale development projects, where customers build applications from dozens or hundreds of components. As enterprises using multi-source development with open source software create software products, applications, and services by combining smaller building blocks of software - each of which may have its own unique license obligations - the Black Duck Suite automatically compares license obligations, identifies conflicts between the sub-components, and automatically suggests license alternatives.

For more information on patent US 7,552,093 B2 or the Black Duck Suite, visit www.blackducksoftware.com.

About Black Duck Software

Black Duck Software is the leading provider of products and services for automating the management, governance and secure use of open source software, at enterprise scale, in a multi-source development process. Black Duck™ enables companies to shorten time-to-market and reduce development costs while mitigating the management, security and compliance challenges associated with open source software. Black Duck Software powers Koders.com, the industry’s leading code search engine for open source, and is among the 500 largest software companies in the world, according to Softwaremag.com. The company is headquartered near Boston and has offices in San Francisco, Paris, Tokyo and Hong Kong, as well as distribution partners throughout the world. For more information, visit www.blackducksoftware.com.

Black Duck, Know Your Code and the Black Duck logo are registered trademarks of Black Duck Software, Inc. in the United States and other jurisdictions. Koders is a trademark of Black Duck Software, Inc. All other trademarks are the property of their respective holders.

Press Contacts

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432

Black Duck Software Names Open Source Rookies of 2009

tkenny — Tue, 19 Jan 2010 05:59:16 -0500

Black Duck Software Names Open Source Rookies of 2009

New Projects reflect the breadth of open source innovation in Cloud computing, Gaming, Health Care, Mobile

WALTHAM, Mass., January 19, 2010, — From a Twitter client for World of Warcraft to a natural language processing system for the clinical health care community, open source projects have the answer to an increasing range of development challenges, according to Black Duck Software, which today announced its 2009 open source ‘Rookies of the Year’ list.

Working from a list of over 19,000 new projects launched in 2009, Black Duck evaluated project popularity using a scoring system that awards points for the number of releases within a project, the number of developers involved, and the number of web sites linked to the project. After auditing its findings and normalizing scores, Black Duck determined the top 10 Rookie projects.

Spanning mobile, healthcare, cloud computing, gaming and social media/collaboration, the Rookies exemplify the flexibility - and time-to-market advantage - of open source.

The Black Duck Rookies of the Year for 2009 include:

Live Android - for those who want to try Android without buying a phone, Live Android lets the user run Android on his or her PC without affecting other files.
Open Health Natural Language Processing - developed by the Mayo Clinic and IBM, the project gives medical clinicians and researchers access to unstructured textual documents (e.g., pathology reports, clinical notes, etc.)
Mobile Browser Definition File - provides all the information needed to adaptively render content for mobile phones and devices, presenting server applications with a set of 67 capabilities or properties - from screen size to cookie support - to describe a mobile client device.
Redis (REmote Dictionary Server) - An advanced key-store database which supports very fast, persistent access to a dataset. A simple way of storing data and a concept that can scale to the cloud.
Smasher - Audio loop slicer designed to create striking effects from WAV, MP3, FLAC or AIFF files in seconds without a sequencer. Effects include filter sweeps, phasing, flanging, delay, and distortion.
AbiCloud - Infrastructure software for the creation and integral management of public and private clouds based on heterogeneous environments. The project aims to offer users a tool with the capacity for scaling, management, automatic and immediate provision of servers, storage, networks, and virtual network devices, as well as applications.
Transdroid - Remote torrent client for Android that supports faster downloads of large video, audio or software files.
Rainmeter - This customizable PC resource meter can display various performance data in different formats. Rainmeter can measure CPU load, allocated memory, network traffic, performance data, uptime, free disk space, and more.
TweetCraft - This World of Warcraft add-on enables players to send and receive tweets using Twitter without leaving the game; automatically upload and post screenshots using TwitPic (shares photos on Twitter) and automatically tweet certain in-game events such as achievements.
Native Client - Runs x86 native code in web applications, with the goal of ensuring browser neutrality, OS portability, and safety.

“The Rookies of the Year projects represent some of the hottest areas in software – cloud, gaming, mobile, healthcare – and open source at its best, communities identifying problems and developing solutions in an open, collaborative process,” said Peter Vescuso, Executive Vice President, Black Duck Software. “ Some of the projects are niche and others are well-known, but all represent the broadening innovation and influence of open source software.”

Black Duck also identified five Honorable Mention projects lead by Android. Read more about these projects at the Black Duck blog: http://blog.blackducksoftware.com/?p=571.

Black Duck spiders the Internet for open source code, collecting information about projects and code into the Black Duck KnowledgeBase, which contains information on more than 230,000 open source projects from more than 4,500 unique websites. For additional information on Rookie open source projects, visit www.blackducksoftware.com.

About Black Duck Software
Black Duck Software is the leading provider of products and services for automating the management, governance and secure use of open source software, at enterprise scale, in a multi-source development process. Black Duck™ enables companies to shorten time-to-market and reduce development costs while mitigating the management, security and compliance challenges associated with open source software. Black Duck Software powers Koders.com, the industry’s leading code search engine for open source, and is among the 500 largest software companies in the world, according to Softwaremag.com. The company is headquartered near Boston and has offices in San Francisco, Paris, Tokyo and Hong Kong, as well as distribution partners throughout the world. For more information, visit www.blackducksoftware.com.

Black Duck, Know Your Code and the Black Duck logo are registered trademarks of Black Duck Software, Inc. in the United States and other jurisdictions. Koders is a trademark of Black Duck Software, Inc. All other trademarks are the property of their respective holders.

Press Contacts

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432

Black Duck Software Growth Surges in 2009, Closes Year with Substantial Gains

mwaldron — Wed, 13 Jan 2010 00:00:00 -0500

Black Duck Software Growth Surges in 2009, Closes Year with Substantial Gains

Year-over-year bookings grow 37%

WALTHAM, Mass., January 13, 2010— Shattering growth records for Q4 and 2009 overall, Black Duck Software, the leading global provider of products and services for accelerating software development through the managed use of open source software, today announced a record Q4 and 2009 performance that saw the company achieve a 37 percent year-over-year growth in bookings for the year.

Growing market awareness of the importance of managing and controlling the use of open source software fuelled Black Duck’s momentum and contributed to robust Q4 sales, with world-class companies SAP, Compuware, and SITA signing on as new customers.

In surpassing its 2009 bookings plan, Black Duck grew its presence in all key business sectors, with mobile and enterprise software deals leading the wave.

Black Duck’s services business also grew significantly (30%) in Q4, with the software IP assessments business up 31% year-over-year and rising to 34% sequentially from Q3 ‘09 to Q4 ‘09, signaling resurgence of the M&A market.

Black Duck helps its customers’ development organizations improve efficiency and accelerate time-to-solution using a multi-source development process that combines open source software with internally-developed and third-party code. Black Duck solutions enable the widespread use of open source software while mitigating the associated management, compliance and security challenges.

“2009 was a difficult year for many companies, but Black Duck’s products and services helped companies stay competitive, effectively managing resources and reducing cost and risk,” said Tim Yeaton, CEO and President. “Black Duck’s value proposition – making it simple to use open source code at enterprise scale - helps our customers develop software and products more effectively, increasing competitive advantage.”

Fiscal year 2009 year-end successes include:

Breakthrough growth in a difficult economy. Fiscal year 2009 saw the launch of the Black Duck Suite, which contributed to a bookings surge of 37 percent year-over-year against 2008 - with 2H 2009 annualized growth even higher. The company’s subscription and professional services business grew substantially, with software IP assessments posting growth of 85 percent for the second half of the year, signaling a return to growth in the mergers and acquisitions market.

Achieved positive management operating income in Q4 and for all of 2009. Billings exceeded total expenses for the quarter and the entire year due to the company’s strong management of income and expenses.

International expansion continues with Tokyo office. In addition to maintaining international offices in Hong Kong, Frankfurt and Paris, the company opened a Tokyo office to serve channel partners and customers in the Asia-Pacific region.

New customer growth. The company added 45 new customers in Q4, ending the year with more than 700 customers. New customers reflect strength in the enterprise software and mobile and telecommunications sectors.

Significant enhancements to Koders.com. Black Duck broke the 2.5 billion lines of code mark with Koders.com, its free open source code search engine. Black Duck has increased the open source software code available through Koders.com by 400 percent since acquiring the site in 2008.

Awards and Recognition in 2009:

Named to Piper Jaffray’s list of "Nifty 150" private cloud computing companies.

Named to Software Magazine Software 500 ranking of the world’s largest software and service providers for the second year in a row. The company moved up 26 places in the rankings. The Software 500 is a revenue-based ranking of the world’s largest software and services suppliers.

Named to the SD Times 100. Recognized in the Tools and IDE categories for products and services that support multi-source development.

Named a 2009 voke Innovator. Recognized for helping developers use open source code and transforming the application lifecycle through innovation.

Listen to a podcast interview with Tim Yeaton, CEO and President of Black Duck Software reviewing 2009 and looking at 2010 open source trends by visiting http://ducks.blackducksoftware.com/~webmedia/_Podcasts/BDS-Tim-Yeaton-1-11-10.mp3

About Black Duck Software

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432

Black Duck Software and Koders.com identify 2009's most popular computer language keywords

tkenny — Mon, 28 Dec 2009 13:11:25 -0500

Black Duck Software and Koders.com identify 2009's most popular computer language keywords

“12 Days of Code Search” based on hundreds of thousands of searches performed on Koders.com

Waltham, Mass – Dec. 28, 2009 – Koders.com, the leading software code search engine, today issued a summary of the most popular computer language keywords, files and projects used by developers in December, 2009. Analyzing search engine trends in a number of different computer languages, the “12 Days of Code Search” is based on hundreds of thousands of searches and downloads performed by thousands of users. Results were compiled and analyzed by Black Duck Software, the leading provider of products and services for automating the management, governance and secure use of open source software at enterprise scale.

Powered by Black Duck Software, Koders.com is a free code search website serving tens of thousands of unique visitors per day. Koders.com includes 2.5 billion lines of open source code collected from more than 4,500 Internet sites. Black Duck has increased the open source software code available through Koders.com by 400 percent since acquiring the site in 2008. To identify the most popular open source software keywords and projects and to access code, visit Koders.com.

Findings from 2009’s “Twelve Days of Code Search”

C-language
Most popular search keyword: include
Most downloaded file: cdefs.h from the snort project
Most viewed C-language project: GNU Core Utilities

C++
Most popular search keyword: windows.h.
Most downloaded file: GPSInterface_Serial.cpp from the Roadnav project.
Most viewed C++ language project : TONG.

Java
Most popular search keyword: java
Most downloaded file: BTree.java from the Java LDAP Server project.
Most viewed Java language project: Java LDAP Server.

Javascript
Most popular search keyword: window.
Most downloaded file: javascript.js from the PHP MMORPG project.
Most viewed Javascript language project: eGroupWare.

PHP
Most popular search keyword: forum.The
Most downloaded file: demo31_show_who_is_online-chat.php from the phpFreeChat project.
Most viewed PHP language project: PHP MMORPG.

Perl
Most popular search keyword: readdir
Most downloaded file: autorun.pl from the project Ethereal Darkness.
Most viewed Perl language project: ActivePerl.

Python
Most popular search keyword: wxpython.
Most downloaded file: fog.py from the Cygwin Ports -QScintilla (Qt3) project.
Most viewed Python language project: DocEng Toolkit.

SQL
Most popular search keyword: oracle
Most downloaded file: Create Trigger Basic Template.sql from the sqlWebArchitect project.
Most viewed SQL language project: sqlWebArchitect.

C#
Most popular search keyword: gridview
Most downloaded file: socketMembers.cs from the Networking .NET Class Library – NetCl project. The most viewed C# language project on Koders.com was ImageMaster.

Delphi
Most popular search keyword: thread.
Most downloaded file was IcsMD5.pas from the Simple Reverse Proxy (pxy)(pxy) project
Most viewed Delphi language project: FreePascal.

Ruby
Most popular search keyword: socket
Most downloaded file was echo_cli.rb from the RubyPKI project.
Most viewed Ruby language project: Dango.

As a 12th day surprise for the community, Black Duck announced that it has added about 100 million lines of code (LOC) to Koders.com, officially breaking the 2.5 billion LOC barrier. Billions more lines of code are covered by Black Duck in its KnowledgeBase. “Our goal is to make the code in the KnowledgeBase available as a free resource for the global development community,” said Peter Vescuso, Executive Vice President, Black Duck Software. ”In addition, we are productizing the code search in Koders so that developers can apply search to their own code, inside the firewall. We call it Black Duck Code Sight™, and it’s available free for use with up to 5 million or fewer lines of code, and also as an upgradeable Enterprise Edition. We believe code search is a significant productivity booster for software developers, and are excited, on the 12th day of code search, to make Code Sight available to developers,” added Vescuso.”

Press Contacts

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Tim Allik
TopazPartners
tallik@topazpartners.com
+1 781-404-2410

Black Duck Software Announces Enterprise Code Search Initiative for the Black Duck Suite

mwaldron — Tue, 15 Dec 2009 00:00:00 -0500

Black Duck Software Announces Enterprise Code Search Initiative for the Black Duck Suite

Details Rollout for Enterprise Code Search

WALTHAM, Mass., December 15, 2009 — Black Duck Software, the leading global provider of products and services for accelerating software development through the managed use of open source software, today announced Black Duck Code Sight™ as part of its Code Search Initiative designed to empower developers and enterprises by providing comprehensive code search capability as part of the Black Duck Suite. The search technology comes from Black Duck Koders.com, the leading open source code search site.

The code search initiative has three phases: expansion of open source code available at Koders.com; release of Black Duck Code Sight Enterprise Edition and Free Edition for enterprise code search, and an open integration framework initiative for community expansion of integrations with source code management systems.

Available today, Koders.com, the free code search web site serving tens of thousands of unique visitors per day, has been expanded to now access over 2.5 billion lines of open source code. Black Duck has increased the code freely available via Koders.com by 400 percent since acquiring the site in 2008.

The company also plans a Q1 2010 addition to its Black Duck Suite: Black Duck Code Sight, an enterprise code search capability. Based on the proven scalable search technology behind Koders.com, Code Sight powers a number of public sites including the corporate developer network of one of the largest technology companies in the world. Code Sight expands the current capability of the Black Duck Suite beyond searching metadata associated with open source projects, with the addition of source code search to greatly enhance developer productivity and code quality.

Code Sight will index and make software searchable across multiple source code repositories for local or geographically distributed development teams. With this addition, the Black Duck Suite will provide comprehensive code search -- open source component metadata as well as an organization’s internal source code – that can increase developer productivity by finding code quickly, locating and tracking down bugs faster, and reducing redundant development. Code Sight will integrate securely and seamlessly with a customer’s existing source code management systems and developer workflows.

“With the addition of Code Sight, the Black Duck Suite will help developers realize even greater productivity gains and further accelerate software development,” said Tim Yeaton, CEO and President, Black Duck Software. “By enabling the search of both metadata and source code, we are giving developers more powerful ways to find the code they need, when they need it, in compliance with company policies, all the while giving them up-to-date version, license and security data about that code. It’s a powerful suite of tools that will enable developers to be more agile and productive, and provide competitive advantage to their companies.”

Also in Q1, Black Duck will release Code Sight Free Edition, a free version of the enterprise code search product designed to be used by teams of developers and community projects. Code Sight Free Edition will be fully functional with capacity for up to five million lines of code. Code Sight Free Edition can be upgraded to Code Sight Enterprise Edition. Developers interested in being notified about the availability of the free or enterprise version can register at: www.blackducksoftware.com/code-sight

To enrich its code search offerings, in Q1 Black Duck will launch an open integration framework initiative to enable customers and partners to expand source code repository integration with Code Sight. Code Sight comes with built-in integration for IBM Rational ClearCase, Subversion, Git, Microsoft Team Foundation Server and other open source and commercial source code management systems. The addition of the open framework initiative will enable community-led expansion of additional source code repositories.

For more information on Black Duck software see www.blackducksoftware.com. Visit Black Duck’s free open source search engine at www.koders.com. To sign up for Code Sight Free Edition, register at: www.blackducksoftware.com/code-sight

About Black Duck Software

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432

Black Duck Software Offers Five-Point Checklist to Guide Successful Deployment of Applications Built with Open Source Software

mwaldron — Tue, 08 Dec 2009 00:00:00 -0500

Black Duck Software Offers Five-Point Checklist to Guide Successful Deployment of Applications Built with Open Source Software

Checklist helps organizations overcome barriers to OSS adoption, leading to more efficient software development processes

WALTHAM, Mass., December 8, 2009 - Open source software (OSS) has garnered interest from commercial software developers and enterprise IT managers as a way to cut costs, increase efficiency and speed time-to-market, but many remain unsure how to integrate and manage open source deployed in their applications and systems.

Black Duck Software, (www.blackducksoftware.com) the leading global provider of products and services for accelerating software development through the managed use of open source software, has reviewed thousands of successful OSS deployments and developed a five-point checklist that can be used by software companies, where concerns about intellectual property and licensing risk can inhibit OSS adoption, and enterprise IT executives, where risk to infrastructure and operations are obstacles to deployment of OSS code.

Jeff Durand, VP of Professional Services at Black Duck Software, notes “Enterprise IT executives want to get more out of investments in technology and reduce complexity. They worry about managing the thousands of applications used in their operations and are concerned that applications with OSS code may create risk and be difficult to manage. Developers, conversely, are looking for code reuse. They are concerned with increasing the velocity of development, reducing complexity and increasing innovation. Open source, properly implemented, is an answer for both groups.”

Durand recommends developers and enterprises use a five-point checklist to ensure successful deployment of OSS code.

Have a written, explicit OSS strategy - Know what you are trying to do with open source, and develop a disciplined OSS policy and set of practices, advises Durand. Automation through tools that identify OSS code and any license dependencies is a critical first step. “Automation makes development organizations more efficient and builds quality into the process,” he observes. “Manual processes are not fast enough to aid in the discovery of hidden or potentially encumbered code. The more automation is in place, the better able a developer will be to take advantage of OSS code.” Automation also minimizes the impact of OSS compliance policies on developers, who can stay focused on developing rather than tracking code provenance.

Integrate with other systems, especially build and change management tools -Integrating with a company’s build system is a natural and convenient place to check compliance, scan for third-party and OSS code and identify conflicts. Finding issues early in the development cycle will save effort later.

Check all possible sources for incoming OSS - A single-source application or code base is the exception, not the rule, in today’s global development infrastructure, says Durand. Code can come from many sources - OSS forges, community projects, third-party developers. Pointing to Microsoft’s recent brush with undetected OSS code, Durand notes that outsourcing software development has become a best practice - leaving software companies and enterprise IT departments with doubts about code provenance. “Your developers, external developers and contractors are part of your software supply chain,” he says. “You need a best practice that describes how to manage inbound code, an institutionalized policy for managing third-party and OSS code, and a documented process that the entire organization can understand and support.”

Drive efficiency by identifying and standardizing on OSS components- A lack of control in the development process can leave a company with 10 different XML parsers, multiple libraries with similar functionality, or logging and bug-tracking systems that offer largely the same features. Standardizing on an approved set of OSS components (e.g., Tomcat, log4j, zlib, etc.) by establishing a process and system for bringing in and evaluating components eliminates the need to test and get approval for the same components over and over. “We recommend creating an approved set of components that is accessible and usable by the entire development organization,” says Durand. “For example, the Black Duck Suite includes a platform and workflow to create a catalog of approved components. Developers can check the approved list first before spending the effort to find a component on their own, getting it approved, etc.” The key, adds Durand, is to standardize on proven OSS components as a best practice using appropriate process, rigor and review of incoming code.

Contribute back to avoid forking code - A big part of the OSS experience is giving back to the community. Some licenses explicitly state how code must be returned to the community. If your development plans include using OSS, it’s a good idea to think from the start about contributing code back including bug fixes. Not only will this help your organization eliminate the need to maintain your code as a separate fork, points out Durand, it’s a good example of cooperative development at work and you maintain a good working relationship with the community.

For more information about Black Duck’s Five-Point Checklist, listen to the podcast with Jeff Durand, VP of Professional Services, Black Duck Software at http://ducks.blackducksoftware.com/~webmedia/_Podcasts/BDS-Jeff-Durand-12-08-09.mp3. For more information on Black Duck Software and the Black Duck Suite, visit www.blackducksoftware.com.

About Black Duck Software

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432

Commercial Use of Open Source Software Drives Significant Cost Savings for Enterprises and Development Organizations

tkenny — Tue, 10 Nov 2009 11:43:01 -0500

Commercial Use of Open Source Software Drives Significant Cost Savings for Enterprises and Development Organizations, says Black Duck Analysis

The average software product or application contains 22 percent open source software with an estimated value of $26 million per product or application

WALTHAM, MA - November 10, 2009 - Businesses and organizations implementing multi-source development with open source software benefit from significant cost savings and improved application development efficiencies, according to a recent survey of enterprise development organizations conducted by Black Duck Software. Black Duck is the leading global provider of products and services for accelerating software development through the managed use of open source software.

Black Duck surveyed over 175 customers that used open source software in hundreds of development projects over the past 18 months. The results revealed that an average product or application contains almost 700 MB of code, 22 percent of which is open source software. The customers and applications included in the sample were drawn from a wide range of application segments, including many that aggressively use open source such as mobile, digital media, social media, financial services and enterprise software.

Using the COnstructive COst MOdel (COCOMO) technique, Black Duck estimates the cost of developing the 22 percent of open source software used by companies in the study sample at approximately $26 million per product or application.

"Open source has become part of the development fabric of companies in many sectors of the economy,” said Tim Yeaton, CEO and President, Black Duck Software. “Driven by a new pragmatism with its roots in creating software more efficiently and effectively, development organizations and companies are using open source to gain significant competitive advantage in a multi-source development process. The ‘not invented here’ mentality is rapidly disappearing, and companies not pro-actively using open source are re-evaluating their approach. Today’s markets demand a total focus on finding and using the right code for the job."

Black Duck’s extensive work with commercial customers that build software using open source components gives the company broad insight into how open source is used and adopted across industries. The company spiders the Internet collecting open source and other downloadable code into a repository called the Black Duck KnowledgeBase, a database of more than 220,000 open source projects with tens of billions of lines of code from over 4,500 unique Internet sites. Daily updates of open source statistics can be found at http://www.blackducksoftware.com/oss

About Black Duck Software

Black Duck Software is the leading provider of products and services for automating the management, governance and secure use of open source software, at enterprise scale, in a multi-source development process. Black Duck™ enables companies to shorten time-to-market and reduce development costs while mitigating the management, security and compliance challenges associated with open source software. Black Duck Software powers Koders.com, the industry's leading code search engine for open source, and is among the 500 largest software companies in the world, according to Softwaremag.com. The company is headquartered near Boston and has offices in San Francisco, Paris, Tokyo and Hong Kong, as well as distribution partners throughout the world. For more information, visit www.blackducksoftware.com.

Press Contacts

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432

Rob Bearden Joins Black Duck Software's Board of Directors

mwaldron — Wed, 28 Oct 2009 00:00:00 -0400

Rob Bearden Joins Black Duck Software’s Board of Directors

Bearden Brings Twenty Years of Industry Experience and a Stellar Track Record for Building and Scaling World-Leading Open Source and Enterprise Software Companies

WALTHAM, MA - October 28, 2009 - Black Duck Software, the leading global provider of products and services for accelerating software development through the managed use of open source software, today announced that Rob Bearden has joined the company's Board of Directors. Bearden comes to Black Duck with more than 20 years of software industry experience building and scaling some of the most successful open source and enterprise software companies in the world.

Bearden will apply his software industry experience to support Black Duck's continued expansion and strong growth. A 53 percent third-quarter rise in services contributed to continued top-line bookings growth in the third quarter of 2009 for Black Duck. Rising adoption of tools by enterprises to manage multi-source development, in which software developers combine open source code with in-house developed and other code, is driving Black Duck's business.

Bearden has made significant contributions in the open source community both advising and running successful companies throughout the years. Until its recent acquisition by VMware, Bearden was President and Chief Operating Officer (COO) of SpringSource. Before joining SpringSource, Bearden served as Entrepreneur in Residence at Benchmark Capital, a leading venture capital firm based in the Silicon Valley. He was also COO for OpenSpan, a desktop integration software provider. Previously Bearden served as COO for JBoss, the world's leading open source middleware company, where he helped architect and execute the company's business model, managed its worldwide operations, and orchestrated its successful acquisition by Red Hat in 2006.

"We are thrilled to add one of the most respected open source software executives in the industry to our board of directors," said Tim Yeaton, President and CEO of Black Duck. "I have known Rob for many years and greatly value his keen industry insights and strong business acumen, as well as his immense personal integrity and candor. Rob will be a great asset in furthering Black Duck's mission to accelerate innovation and reduce costs of software development at enterprise scale via the managed use of open source software."

Bearden will be replacing Roger Heinen on Black Duck's Board. Heinen is retiring from Flagship Ventures and active investing, but will be staying on as an advisor to the Company.
"Roger Heinen has offered great support and leadership to the company for many years, and we greatly appreciate his many invaluable contributions," continued Yeaton. "We are grateful to have Roger's continued guidance and counsel in his ongoing role as an advisor to the Company."

Rob Bearden shares his thoughts about joining the board of directors on the Black Duck blog. You can read Rob's blog post at http://blog.blackducksoftware.com/?p=284.

About Black Duck Software

Black Duck Software is the leading provider of products and services for automating the management, governance and secure use of open source software, at enterprise scale, in a multi-source development process. Black Duck™ enables companies to shorten time-to-market and reduce development costs while mitigating the management, security and compliance challenges associated with open source software. Black Duck Software powers Koders.com, the industry's leading code search engine for open source, and is among the 500 largest software companies in the world, according to Softwaremag.com. The company is headquartered near Boston and has offices in San Francisco, Paris, Tokyo and Hong Kong, as well as distribution partners throughout the world. For more information, visit www.blackducksoftware.com.

Press Contacts

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432

Encryption Algorithms Widely Embedded in Open Source Software

mwaldron — Wed, 21 Oct 2009 00:00:00 -0400

Encryption Algorithms Widely Embedded in Open Source Software

Black Duck Export 5.0 Release Helps Developers Manage Export Compliance

WALTHAM, Mass., October 21, 2009 — Companies that use open source code in commercial products face a hidden threat from the undetected presence of encryption algorithms, says Black Duck Software, the leading global provider of products and services for accelerating software development through the managed use of open source software.

A search of the Black Duck KnowledgeBase, which contains information on more than 220,000 open source projects with tens of billions of lines of code, revealed that over 4,000 projects include encryption algorithms strong enough to require a filing with the US Department of Commerce Bureau of Industry and Security (BIS), if the code is exported from the US. From a regulatory perspective, companies assume responsibility for the encryption content of any open source code in their commercial products, whether sourced from the OSS community or developed in-house. Open source projects, on the other hand, are allowed to publish software containing encryption under license exception TSU. This special exemption is further explained in Black Duck's guide to export laws for open source software referenced below. Violators of US encryption export controls can be subject to significant fines and even imprisonment.

The Black Duck analysis also uncovered an additional 3,900 projects that could potentially require a BIS filing. For example, some projects use algorithms that support a variable key length that, if sufficiently strong, would fall under strict controls.

“Software that uses encryption, even common encryption for only a minor function, must comply with encryption export control requirements,” said export regulation compliance expert Benjamin H. Flowe, Partner, Berliner, Corcoran & Rowe, L.L.P. “It is awkward at best to discover encryption functions only after a company or project has been exporting code.”

The Black Duck analysis also identified the top encryption algorithms present in open source software.

Top 10 Encryption Algorithms Used in Open Source Projects

Algorithm	%	Type	Encryption Only
RSA	13%	Asymmetric
DSA	9%	Signature	*
DES	9%	Symmetric
MD5	8%	Hash	*
SHA	8%	Hash	*
Blowfish	6%	Symmetric
Diffie-Hellman	6%	Keyman
HMAC	5%	Mac	*
ElGamal	5%	Asymmetric
AES	5%	Symmetric
Sub Total	74%
Other	26%
Total	100%

Black Duck Export 5.0 Helps Developers Identify Encryption Algorithms

The release of Black Duck’s analysis of encryption in open source projects coincides with the 5.0 release of Black Duck Export, a component of the Black Duck Suite which assists companies in complying with export regulations by scanning software and identifying the presence of encryption algorithms. In today’s multi-source development process, developers increasingly download and integrate open source from the Internet. Software tools are needed to assist developers in uncovering what’s in the code they use and controlling its use. Black Duck Export 5.0, which features more than 450 encryption algorithms, has been enhanced with the latest changes to US export regulations to help companies address these challenges. More information on Black Duck Export may be found at www.blackducksoftware.com/export.

“With software reuse on the rise, many companies are unaware of hidden encryption technology in their software product and the potential ramifications for exporting the product,” said Eran Strod, Director of Product Marketing, Black Duck Software. “Ballooning code bases pose challenges to uncovering hidden encryption algorithms. Black Duck Export enables companies to detect encryption vulnerabilities and comply with regulations proactively.”

Filing requirements for open source projects are generally much simpler than those for commercial products that include open source code. To assist open source and multi-source developers in complying with applicable export regulations, Black Duck has developed the Guide to Encryption Export Compliance in an Open Source World, which can be downloaded for no cost from the Black Duck Website.

For up-to-date information on open source projects, including language use, popular search terms and license use, visit http://www.blackducksoftware.com/oss.

About Black Duck Software

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432

Software IP Assessments Signal Return of Merger & Acquisition Market, Drive Q3 Results

mwaldron — Wed, 14 Oct 2009 00:00:00 -0400

Software IP Assessments Signal Return of Merger & Acquisition Market, Drive Q3 Results

Quarterly surge of 53 percent in Services positions Black Duck for strong overall growth in ‘09

WALTHAM, Mass., October 14, 2009 — A 53 percent third-quarter rise in Services, including Software Intellectual Property (IP) Assessments, contributed to continued top-line bookings growth in the third quarter of 2009 for Black Duck Software, the company said today. Buoyed by new customer wins and new subscriptions for the Black Duck Suite, the company remains on-track for strong annual growth, continuing its trend of sequential-quarter growth. Black Duck Software is the leading global provider of products and services for accelerating software development through the managed use of open source software.

The growth in services and IP code assessments - in which Black Duck scans software code bases to identify the presence of open source and third party code and related software licensing obligations - reflects the resurgence of capital markets and increased M&A activity. The company also added new enterprise accounts including AOL, Aspen Technologies, Administaff, Evident Software and MFormation.

Rising adoption of open source software in enterprises that rely on multi-source development, in which software developers combine open source code with in-house developed code, supports Black Duck’s growth. The company’s products and services help companies manage the use of open source code at enterprise scale.

Accomplishments for the third quarter of 2009:

Named to Software Magazine Software 500 ranking of the world’s largest software and service providers for the second year in a row. The company moved up 26 places in the rankings. The Software 500 is a revenue-based ranking of the world’s largest software and services suppliers.

Expanded free OSS code search engine Koders.com to 2.4 billion lines of code. Koders.com provides software developers with access to over 2.4 billion lines of code, written in 33 languages. The milestone represents a 210 percent increase in code since Black Duck acquired the assets of Koders.com in April 2008. The company adds an average of 100 million lines of code to the site each month.

Became a Founding Member of Open Source for America. The coalition of more than 50 companies, academic institutions, communities, related groups and individuals was created to serve as a unified voice for the promotion of open source in the U.S. Federal government sector.

Revealed analysis of shifts in the use of open source programming languages. The analysis of data from the Black Duck KnowledgeBase showed static programming languages, such as C, C++ and Java, losing share to dynamic languages such as JavaScript and PHP. The analysis (www.blackducksoftware.com/oss/projects#languageos) of language usage was performed by counting lines of source code across all open source projects in the KnowledgeBase.

New customer growth. The company added 26 new customers in Q3 to end the quarter with 688 customers. New customers reflect particular strength in the software, mobile and IT performance management sectors.

“Black Duck’s Software IP Assessment services business is a leading indicator of an improving tech sector economy,” said Tim Yeaton, Black Duck Software president and CEO. “As M&A activity resumes and capital markets come back we expect to see continued growth, driven by demand for services and new licenses for the Black Duck Suite of products. One of the features of this recovery is a new pragmatism on the part of development organizations – a singular focus on maximizing value while reducing development costs. Open source is a path to value, and our customers understand the need to manage open source components in development projects to reduce risk, control costs and accelerate innovation.”

About Black Duck Software

Black Duck Software is the leading provider of products and services for automating the management, governance and secure use of open source software in multi-source development at enterprise scale. Black Duck™ enables companies to shorten time-to-solution and reduce development costs while mitigating the management, security and compliance challenges associated with using open source software. Black Duck Software powers Koders.com, the industry’s leading code search engine for open source, and is among the 500 largest software companies in the world. The company is headquartered near Boston and has offices across the U.S., Europe and Asia, and has distribution partners throughout the world. For more information, visit www.blackducksoftware.com.

Black Duck, Know Your Code and the Black Duck logo are registered trademarks of Black Duck Software, Inc. in the United States and other jurisdictions. Koders is a trademark of Black Duck Software, Inc. All other trademarks are the property of their respective holders.

Press Contacts

Peter Vescuso
Black Duck Software
press@blackducksoftware.com
+1 781-891-5100

Ann Dalrymple
TopazPartners
adalrymple@topazpartners.com
+1 781-404-2432