D o D C I O

Dan RisacherOctober 23, 2012

Open Source and DoD CIO

04/18/2023 2S U P P O RT T H E WA R F I G H T E R

D o D C I O

Review: DoD OSS policy (2009)

• OSS is “COTS”; notes statutory preference• Lists advantages: many-eyes, agility, reduced lock-

in, no burdensome restrictions, license cost, maintenance cost, rapid prototyping

• Clears-up IA interpretation (OSS is not “freeware”)• Plan for software support (OSS or proprietary)• GPL does not obligate public disclosure• Should share code within gov’t• Release back to public when:

1. Gov’t PM decides in gov’t interest

2. Gov’t has data rights

3. Not restricted by ITAR

04/18/2023 3S U P P O RT T H E WA R F I G H T E R

D o D C I O

International Traffic in Arms Regulation(ITAR)

• Q: How to release code from a weapon system?ITAR §125.4(b)(13) exempts from licensing “[t]echnical data approved for public release ( i.e. , unlimited distribution) by the cognizant U.S. Government department or agency or Office of Freedom of Information and Security Review. This exemption is applicable to information approved by the cognizant U.S. Government department or agency for public release in any form. It does not require that the information be published in order to qualify for the exemption.”

• A: Security and Policy Review– Office of Security Review, WHS (http

://www.dtic.mil/whs/esd/osr/)– Agencies may have their own process

• I am not your lawyer

04/18/2023 4S U P P O RT T H E WA R F I G H T E R

D o D C I O

Beyond OSS consumer

• Done– Apache Accumulo– SEAndroid– Virtual World Framework

• Upcoming– Ozone Widget Framework– CANES Agile Core Services– DI2E-F “BASE-F”– Distributed Data Framework – MrGeo– Software Defined Radio framework– Others

04/18/2023 5S U P P O RT T H E WA R F I G H T E R

D o D C I O

DSP BLVendor ADSP BL

Vendor ADSP BLVendor ADSP BL

Vendor D

Code & Compile

Traditional Workflow

DSP BLVendor A

DSP BL

Vendor B

DSP BLVendor C

DSP BLVendor D

• Lower level of reuse• No implicit run-time

reconfiguration

• Custom integration each spin• Language Dependence

• Developers work off of ICD- Recurring custom I/O

integration- Tightly-coupled development

required

Open Source Framework Workflow

Component

DSP BLVendor E

CONTROL

I/O I/O

Component

DSP BLVendor E

CONTROL

I/O I/O

Component

DSP BLVendor E

CONTROL

I/O I/O

Component

DSP BLVendor D

CONTROL

I/O I/O

Configure & Deploy

Component

DSP BLVendor A

CONTROL

I/O I/O Component

DSP BLVendor B

CONTROL

I/O I/O Component

DSP BLVendor C

CONTROL

I/O I/O Component

DSP BLVendor D

CONTROL

I/O I/O

Systems Built By Heroes – Code it from scratch

Systems Built By Standards – Code it once, Use it often

• Run-time Field Configurable• Development tools:

- Framework interaction taken care of- DSP develop can focus on DSP

• Well defined interfaces for API and implementation- Workflow shields against staff-

turnover- Supports independent, loosely-

coupled development

• Standards-based Development• Code generators handle

integration code• Language Neutrality

04/18/2023 6S U P P O RT T H E WA R F I G H T E R

D o D C I O

Gov’t Open Source Software Foundation

• Mission– Advocacy– Incubation– Stewardship

• Apache-like– Project committees– Legal committee– Infrastructure team

• Industry partners

• Gov’t partners• Gov’t unique issues:

– FAR/DFARS– Contracts– Data rights– Export control

04/18/2023 7S U P P O RT T H E WA R F I G H T E R

D o D C I O

Questions?