Palamida and Open Solutions Alliance Ensure the Integrity of First Interoperability Prototype

August 8, 2007; 02:48 AM

LinuxWorld -- Palamida(TM), the leader in software risk management solutions, announced the successful completion of code analysis for the Lightweight Authentication Module (LAM), a significant component of the Open Solutions Alliance's (OSA) Common Customer View (CCV) Prototype.

With Palamida's IP Amplifier, the OSA was able to leverage the industry's largest compliance library -- containing open source software ID tags, intellectual property information, and published vulnerability alerts -- to quickly identify and remediate open source license and vulnerability concerns in the LAM portion of the CCV prototype. Having undergone in-depth code level review, corporate users of the CCV can now be assured that it meets important enterprise security and compliance thresholds.

"Open and interoperable in regards to solutions are terrific concepts and we applaud the OSA for leading the open source world in this direction," said Mark Tolliver, CEO of Palamida, "We are pleased to be able to assist with the release of the Common Customer View prototype by providing an audit of intellectual property status for its LAM component. The OSA's level of attention to detail assures potential users that projects delivered under their guidance have been carefully thought through, are vetted, and are ready for prime time use by enterprises worldwide."

Palamida's IP Amplifier accelerated the audit and software risk management process for the OSA's CCV by removing a significant amount of guess work typically left behind by existing solutions. The OSA can now confidently ensure the security and integrity of the open source content related to the LAM.

"The OSA is committed to providing secure, risk-free, interoperable open source solutions for enterprise adoption," notes Dominic Sartorio, President of the OSA and Director of Product Management for SpikeSource, "Palamida's granular analysis of the LAM enabled the CCV team to identify and remediate possible license issues prior to release of the prototype. This level of assurance enabled the OSA to remove any lingering concerns related to intellectual property and move forward with our benchmark product."

"The CCV prototype is the first major fruit of the OSA's collaborative efforts," adds Barry Klawans, OSA spokesperson and CTO of Jaspersoft, "As such, getting it right before we unveiled it to the public was a top priority for our team. Palamida's willingness to take the extra steps necessary to investigate license issues allowed us to remove IP risks."

Comprehensive Code Level Risk Mitigation

Unlike traditional code audit solutions IP Amplifier streamlines the audit process through an innovative feature set. The Auto-Inventory(TM) feature is a patent-pending technology that provides the highest probability results on code source identification. CodeRank(TM) technology rates identified matches based on the percentage of coverage, clustering, and uniqueness of the code to further increase the probability of identifying problematic areas. Thorough source code matching highlights source code snippets, whether they match open source or third party files and/or code snippets, enabling easy location and review while fast search allows the entry of custom search parameters for rapid, targeted results.

Composed of 3 Terabytes worth of content, Palamida's library contains over 140,000 OSS projects, 780,000 versions, 7 billion source code snippets, 10 million Java namespaces, 500 million binary file IDs, and Java, C/C++, Perl, Python, PHP, C#, VB signatures among other components.

About the Common Customer View Prototype

The CCV prototype pulls together data from diverse front-office, back- office and planning applications to present a complete view of customer activity and interactions. It is based on the OSA Interoperability Roadmap's proposal and is expected to be the reference implementation for future proposals including Single Sign-On (SSO), UI integration, data integration, and Application Programming Interfaces (APIs). The CCV is being integrated, tested and demonstrated at LinuxWorld with products from Adaptive Planning, CentricCRM, Jaspersoft, OpenBravo, Talend and Unisys.

About the Company

Palamida enables organizations to manage the growing complexity of mixed code development by answering key questions surrounding the use of open source code: What are you using? Where is it located? What are its intellectual property (IP) and security risks?

Founded in 2003, Palamida offers market leading solutions and services that accelerate the adoption of open source within the enterprise environment by mitigating legal and vulnerability concerns associated with its use. Customers include Avaya, Cisco Systems, EMC, and Microsoft, among others. Read Palamida's blog at http://www.palamida.com/blog or for more information visit http://www.palamida.com/.