Dirk Riehle's Industry and Research Publications

Category: 2. Building Products

  • Open-source software governance: A case study evaluation of supply-chain management best practices [HICSS 2023]

    Open-source software governance: A case study evaluation of supply-chain management best practices [HICSS 2023]

    Abstract: Corporate open source governance aims to manage the increasing use of free/libre and open source software (FLOSS) in companies. To avoid the risks of the ungoverned use, companies need to establish processes addressing license compliance, component approval, and supply chain management (SCM). We proposed a set of industry-inspired best practices for supply chain management…

  • Challenges to open collaborative data engineering [HICSS 2023]

    Challenges to open collaborative data engineering [HICSS 2023]

    Abstract: Open data is data that can be used, modified, and passed on, for free, similar to open-source software. Unlike open-source, however, there is little collaboration in open data engineering. We perform a systematic literature review of collaboration systems in open data, specifically for data engineering by users, taking place after data has been made…

  • The benefits of pre-requirements specification traceability [RE 2022]

    The benefits of pre-requirements specification traceability [RE 2022]

    Abstract: Requirements traceability is the ability to trace requirements to other software engineering artifacts. Traceability can be classified as either pre- or post-requirements specifications (RS) traceability. Pre-RS traceability is the ability to trace between requirements and their origin. However, the benefits of pre-RS traceability are often not clear. In this article, we systematically lay out…

  • Will open source become the default way of developing software?

    Will open source become the default way of developing software?

    Someone on the internet said that open source will become the default way of developing software. This begs the question: What is open source software development? What about other forms of development? And why would open source be the default way? Open source software development There is no one way of developing open source software.…

  • Who to blame for the log4j vulnerability?

    Who to blame for the log4j vulnerability?

    So far, nobody. Not the open source developers, who responded fast and professionally, and not the companies who handled the risk within a day or two. Eventually, however, we will have to blame (or complain) about those companies who got cracked because they did not remove the vulnerability in time. Now, why would a company…

  • Calculating the costs of inner source collaboration by computing the time worked [HICSS 2022]

    Calculating the costs of inner source collaboration by computing the time worked [HICSS 2022]

    Abstract: A key part of taxation, controlling, and management of international collaborative programming workflows is determining the costs of a supplied software artifact. The OECD suggests the use of the Cost Plus method for calculating these costs. However, in the past, this method has been implemented using only coarse-grain data from the costs of whole…