Black Duck Software Expands Software Compliance with exportIP to Manage Export Encryption Requirements.First Software to Automate To turn a set of manual steps into an operation that goes by itself. See automation. Encryption The reversible transformation of data from the original (the plaintext) to a difficult-to-interpret format (the ciphertext) as a mechanism for protecting its confidentiality, integrity and sometimes its authenticity. Encryption uses an encryption algorithm and one or more encryption keys. Search, Identification, and Filing to Ensure Software Products Do Not Violate U.S. Export Regulations WASHINGTON -- Black Duck Software, the leading global provider of software compliance management solutions, today announced exportIP, the first software compliance platform that helps ensure software products do not violate government restrictions regarding encryption export. The United States United States, officially United States of America, republic (2005 est. pop. 295,734,000), 3,539,227 sq mi (9,166,598 sq km), North America. The United States is the world's third largest country in population and the fourth largest country in area. has established rules governing gov·ern v. gov·erned, gov·ern·ing, gov·erns v.tr. 1. To make and administer the public policy and affairs of; exercise sovereign authority in. 2. the strength of encryption algorithms A formula used to turn ordinary data, or "plaintext," into a secret code known as "ciphertext." Each algorithm uses a string of bits known as a "key" to perform the calculations. The larger the key (the more bits), the greater the number of potential patterns can be created, thus making that can be exported internationally, and it imposes significant penalties for companies who violate those rules. exportIP manages compliance with the rules and helps ensure they do not slow down the application development process. exportIP was unveiled at the Update 2006 Conference on Export Controls and Policy, hosted by the Bureau of Industry Security, the part of the U.S. Commerce Department that explains and enforces encryption rules. Update 2006 is being held October 15-17, 2006 at the Grand Hyatt in Washington. Public incidents of export encryption violations demonstrate the need for exportIP: * The Bureau of Industry and Security The Bureau of Industry and Security (BIS) is an agency of the United States Department of Commerce which deals with issues involving national security and high technology. cited a software company in May 2006 for allegedly violating export encryption rules and fined the company $165,000. * The bureau's predecessor, The Bureau of Export Administration, fined a mobile equipment manufacturer $95,000 in 2002 to settle allegations of violating the rules. exportIP reaffirms Black Duck's position as the undisputed market and technology leader in software compliance management by addressing the needs of enterprises, technology product companies, outsourcers, law firms This list of the world's largest law firms by revenue is taken from The Lawyer and The American Lawyer and is ordered by 2006 revenue:[1]
exportIP is the newest addition to the Black Duck product line, joining protexIP, which manages compliance with the various open source and proprietary licenses governing software code. Each product helps software developers, managers, legal counsel, and export encryption policy developers within companies with their respective compliance issues, avoiding delays and allowing maximum productivity benefits from today's software development techniques. Particular care was taken during the design of exportIP to ensure that Microsoft[R] Windows developers' needs were addressed. Microsoft Windows See Windows. (operating system) Microsoft Windows - Microsoft's proprietary window system and user interface software released in 1985 to run on top of MS-DOS. Widely criticised for being too slow (hence "Windoze", "Microsloth Windows") on the machines available then. developers traditionally target a global market and their software may include algorithms that are being reused and may not be categorized cat·e·go·rize tr.v. cat·e·go·rized, cat·e·go·riz·ing, cat·e·go·riz·es To put into a category or categories; classify. cat in the current project. For the first time there is an automated au·to·mate v. au·to·mat·ed, au·to·mat·ing, au·to·mates v.tr. 1. To convert to automatic operation: automate a factory. 2. way to check for and manage encryption compliance. exportIP identifies encryption algorithms within software code and ensures that companies comply with export restrictions Export restrictions (Restriction on exportation) are restrictions to the quantity of goods exported to a specific country or countries by the government. This is mainly: * Developers confirm identification of algorithms and provide additional information relevant to the export restrictions. * Export specialists coordinate the review of projects by developers, review export restrictions for products, and submit any required government paperwork. "As more and more companies create software compliance processes, it makes perfect sense for them to incorporate export encryption management into those processes," said Judith Hurwitz, president of Hurwitz & Associates. "Export encryption rules are a reality, and they are enforced. Building a way to manage and automate compliance throughout the application development lifecycle-- and for all players involved in that lifecycle-- is critical." Black Duck also announced today that Ben H. Flowe, Jr., a Washington lawyer and expert on export encryption compliance, has joined the company's board of advisors. Ben's decision demonstrates support for export encryption compliance management "Black Duck has worked closely with its more than 200 customers over the past three years to develop a system that can manage compliance processes within developed code. With exportIP, export of encryption is the latest specific compliance check that system can execute," said Douglas Levin lev·in n. Archaic Lightning. [Middle English levene, levin; see leuk- in Indo-European roots.] , CEO (1) (Chief Executive Officer) The highest individual in command of an organization. Typically the president of the company, the CEO reports to the Chairman of the Board. of Black Duck Software. "Given the nature of software development today, which involves pulling software code from a variety of sources, a software compliance system is vital. As exemplified by exportIP, Black Duck will continue to add new functionality on top of its compliance architecture to address a variety of application development needs." Levin continued: "Early conversations with potential exportIP customers show that many large software vendors will use exportIP to improve the efficiency of their established export compliance processes, which often involved manual, time-consuming checks. Smaller vendors can use the solution to identify encryption and explain compliance procedures." Availability exportIP is available immediately. For more information, including pricing and purchasing, please visit the Black Duck website (www.blackducksoftware.com). The product is also available from Black Duck's international distribution partners, including Atos Origin Atos Origin, SA (Euronext: ATO) is an international IT corporation which operates in 40 countries worldwide, with over 50,000 employees. The corporate headquarters are located in Paris, France and Zaventem, Belgium. in Europe, 10art-ni in Japan, Black Duck Software Korea, and Open Channel Solutions in Australia and New Zealand New Zealand (zē`lənd), island country (2005 est. pop. 4,035,000), 104,454 sq mi (270,534 sq km), in the S Pacific Ocean, over 1,000 mi (1,600 km) SE of Australia. The capital is Wellington; the largest city and leading port is Auckland. . About Black Duck Software Black Duck Software([TM]) is the leading provider of software compliance management solutions that help companies govern how software assets are created and managed. Black Duck's offerings help businesses take maximum advantage of open source software while at the same time ensure that they satisfy the obligations associated with the code they use. Black Duck's customer base includes enterprises, product developers, outsourcers, law firms and other organizations worldwide that are concerned with protection of software intellectual property. For more information about Black Duck, visit www.blackducksoftware.com. Black Duck Software is a registered trademark, and the Black Duck logo, exportIP, protexIP, and Know Your Code are trademarks of Black Duck Software, Inc. All other trademarks are the property of their respective holders. |
|
||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion