Page 99 - 동북아 공개 SW 국제협력 추진경과

WG2:
One of the main achievements of WG2 members will encourage and help create opportunities for Northeast Asian
developers to collaborate with top developers, including Linus Torvalds, an originator of Linux Kernel, during a face-to-face
discussion in 2017local conferences such as the LC3 conference. (TBD to review by English teacher) We will to establish
the training camp institutionalization. We held the first institutionalcontinue our efforts to develop high level human
resources into even higher levels, which is the ultimate purpose of the master level training camp (OSS MTC) successfully,
based on the accomplishments of). We will also continue the OSS training camp (OSS TC). The OSS TC,), which is held during
the Northeast Asia OSS Promotion Forum, as it has been widely recognized for years and has attracted a majority of open
source software enthusiasts including students and engineers. Another main achievement of WG2 is the release of “NEAOSS
Sample Curricula 3.0”. We reviewed and updated the formerly released draft of “definition of skills and sample curriculum for
students, engineers and managers”We will also organize a special legal team network, including skillset “knowledgelawyers,
legal professors, and software specialists, for the purpose of promoting license compliance in wide areas of the OSS”
ecosystem. We will continue discussing requirements and skillsets of several recent trends such as IT/OSS compliance
education, Cloud Computing and IoT, and updating sample curricula for future releases.
WG2 has selected Block Chain HRD as the next objective and will further discuss the Block Chain area.
The 12th13th CJK OSS outstanding technology award and the 10th11th CJK OSS special contribution award were presented
during the 16th17th forum to promote OSS talents education and training. WG2 will continue to promote the sharing of
teaching materials, the certification of national OSS talents and the mutual certification in CJK by utilizing the Northeast
Asia OSS Sample Curricula.

WG3:
In the past 10 years, WG3 has finished the research of Input Method, Web Interoperability, Repository of OSS System
(RepOSS), Governance Framework for OSS, Open Source Software Maturity and Applicability Assessment Model (OSSMAAM),
as well as the standardization of Software Package Data Exchange (SPDX) for Supply Chain Management (SCM).
WG3 has continued to study the FOSS related standardization and expanded its area in 2017.2018. WG3 has successfully
finished the standard “General Technique Requirements of Network Terminal Operating System” and released it.
WG3 launched the work on FOSS Supply-Chain Risk Management (SCRM) standard guideline. Although ‘used everywhere’
and ‘easy to access’ are main factors of FOSS, there still remains a lack of FOSS governance, compliance and vulnerability
management, which can all lead to potential risks and are already known by legal and security teams. In light of this situation,
FOSS supply-chain risk management (SCRM) standard guideline becomes necessary and urgent. Therefore, FOSS includes
security vulnerability features that static and dynamic analysis can’t discover. Most companies need a governance and
compliance management guide for using FOSS effectively and safely. Recently, WG3 has begun to establish a FOSS SCRM
standard guideline.
In 20172018, WG3 started an Evaluation Guideline for Open R&D Projects, which specifies the process of governmental
open R&D projects. It will contribute to objective and precise measurement of government-driven R&D projects which
release a source code as the result.
In 20172018, WG3 also conducted a preliminary standard study about community governance,design & test services in
projects which helps us evaluatespecifies the community project, contributionwork requirements, method and management.
WG3 has initialized the framework for open source community governance, including community structure, license, the number
of active projects, and project size. The first draft version had being send to survey in the communities of CJK. Next year WG3
will refine the content according to feedbackworkflow.
Since 2013 WG3 has focused on new markets of the 3rd platform, and we will continue to evaluate the software which has
been strongly leading these markets. In 2017, we updated the latest survey of OSS in Big Data platform. Furthermore,
we will keep on improving the method to watch the maturity of OSS using various tools like deep learning and software
metrics analysis and so on.
In 2018, we started a study for OpenChain and OSS Risk Management Services. Furthermore, we will keep on improving
the method to manage risks of OSS using various tools like OpenChain.
For future projects, WG3 is planning to establish three practical standards such as ‘Open Innovation Research and
Development Capability Maturity Model’, ‘Open Source Compliance Guideline for License Governance of Software Supply
Chain Management’ and ‘Open Source Software License Policy Standard Model’.