FOSS compliance engineering in the embedded industry

“The field has grown into a commercial segment with companies
like Blackduck Software and consultancy firms like Loohuis
Consulting offering formal services to third parties.

“Rather than attempting to examine compliance engineering in all
market segments and under all conditions, this article will focus
on explaining some of the tools and skills required to undertake
due diligence activities related to licensing and binary code in
the embedded industry. It is based on the GPL Compliance
Engineering Guide, which in turn is based on the experience of
engineers contributing to the gpl-violations.org project.

“Some of the methods described in this article may not be
permitted by the DMCA or similar legislation in certain
jurisdictions. It is important to stress that the goal of
compliance engineering is not to reverse engineer a product so it
can be resold for monetary gain, but rather to apply digital
forensics to see if copyright was violated. You should consult a
lawyer to find out the legal status of the engineering methods
described here.”

Complete Story