Abstract: Described herein is a system and method for providing a condensed license description syntax for use in a software due diligence system. In particular, the license description syntax may employ a limited number of verifiable attributes to provide precision and lack of redundancy in describing various software licenses relevant to software due diligence. For example, the software due diligence system may identify licenses in software under review and invoke a compiler configured to perform various operations on the license description syntax to check for permissions and obligations associated with the identified licenses (e.g., name translation, operator translation, logical expression evaluation, etc.). Thus, the license description syntax may enable the license database to be established as a global public or private license database, in addition to providing licenses attributes useful in software due diligence review.

Abstract: A system and method is provided for performing software due diligence review, which may include reviewing software for compliance and compatibility with software licenses, export regulations, or other compliance issues. In one implementation, the system may include a binary scan engine configured to analyze binary objects and extract dependency information identifying source code that may be associated with the binary objects. Upon identifying relevant source code, the system may use parallel pattern matching techniques to identify certain keywords in the source code and/or to match the keywords to text patterns that contain excerpts of language relevant to software due diligence. The system may then check for permissions and obligations associated with any matching relevant language to draw inferences regarding potential compliance problems.

Abstract: A system and method is provided for performing code provenance review in a software due diligence system. In particular, performing code provenance review may include sub-dividing source code under review and third-party source into logical fragments using a language-independent text fracturing algorithm. For example, the fracturing algorithm may include a set of heuristic rules that account for variations in coding style to create logical fragments that are as large as possible without being independently copyrightable. Unique fingerprints may then be generated for the logical fragments using a fingerprint algorithm that features arithmetic computation. As such, potentially related source code may be identified if sub-dividing the source code under review and the third-party source code produces one or more logical fragments that have identical fingerprints.

Abstract: A system and method is provided for performing software due diligence review, which may include reviewing software for compliance and compatibility with software licenses, export regulations, or other compliance issues. In one implementation, the system may include a binary scan engine configured to analyze binary objects and extract dependency information identifying source code that may be associated with the binary objects. Upon identifying relevant source code, the system may use parallel pattern matching techniques to identify certain keywords in the source code and/or to match the keywords to text patterns that contain excerpts of language relevant to software due diligence. The system may then check for permissions and obligations associated with any matching relevant language to draw inferences regarding potential compliance problems.

Abstract: A system and method is provided for performing code provenance review in a software due diligence system. In particular, performing code provenance review may include sub-dividing source code under review and third-party source into logical fragments using a language-independent text fracturing algorithm. For example, the fracturing algorithm may include a set of heuristic rules that account for variations in coding style to create logical fragments that are as large as possible without being independently copyrightable. Unique fingerprints may then be generated for the logical fragments using a fingerprint algorithm that features arithmetic computation. As such, potentially related source code may be identified if sub-dividing the source code under review and the third-party source code produces one or more logical fragments that have identical fingerprints.

Abstract: Described herein is a system and method for providing a condensed license description syntax for use in a software due diligence system. In particular, the license description syntax may employ a limited number of verifiable attributes to provide precision and lack of redundancy in describing various software licenses relevant to software due diligence. For example, the software due diligence system may identify licenses in software under review and invoke a compiler configured to perform various operations on the license description syntax to check for permissions and obligations associated with the identified licenses (e.g., name translation, operator translation, logical expression evaluation, etc.). Thus, the license description syntax may enable the license database to be established as a global public or private license database, in addition to providing licenses attributes useful in software due diligence review.