Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Convincing the Military to Embrace Open Source

Posted by Zonk on Sat Dec 29, 2007 07:29 PM
from the talking-to-a-brick-wall dept.
drewmoney writes "Misconceptions about what 'open source software' means has made elements of the US Defense Department reluctant to deploy in a live environment. DoD proponents of shared-source projects are now working to reverse this trend by educating IT decision-makers and demonstrating OSS usefulness. 'The cost of cleaning up a "network spill" that introduces classified material on an unclassified network is running about US$11,000 per incident on the Navy/Marine Corps Intranet (NMCI), so the free Secure Save tool could produce monetary savings for the Navy. Additionally, it would cover more file formats than the costly commercial redaction product currently available on the NMCI.'"
+ -
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by flyingfsck (986395) on Saturday December 29 2007, @07:44PM (#21852262)
    I can tell you, but then I'll have to shoot you...
  • by G3ckoG33k (647276) on Saturday December 29 2007, @07:46PM (#21852270)
    NT 4.0 and US naval ships...

    I think Linux floats here. Just check www.top500.org

    I can't guarantee that all other open source projects will float as well. But, who could?

    • On Navy ships workstations are Windows 2000 for office work and for Sailors to email home (everyone has a UNCLAS account).

      The more specialized gear (Aegis, and various consoles) are usually Unix or Linux, depending on the piece of gear and the Aegis baseline.

      A few pieces of gear run on Windows variants, the Navigation gear (Voyage Management System) the most notable. I think it is a civilian product the military uses.

      From what I can tell the Navy doesn't give two shits about what the software runs on, so l
  • by phrostie (121428) on Saturday December 29 2007, @07:46PM (#21852274)
    maybe they just need to look around and open their eyes.
    there are lots of projects. for example, http://brlcad.org/ [brlcad.org]
  • by MyNameIsFred (543994) on Saturday December 29 2007, @07:53PM (#21852330)
    The article confuses two different problems. One problem is redaction, the other is a network spill. The two are very different. Redaction is "editing problem," deleting classified material from a document to make it unclassified. In a network spill, classified information is accidentally put on an unclassified system. A spill is a much more complicated problem. You have to determine how many systems were "infected," and sanitize those systems. And sanitizing may require the destruction/confiscation of the system. You also have to determine whether anyone without a clearance had access to the material. And I would guess that the vast majority of the cost is labor, not software.
  • by samkass (174571) on Saturday December 29 2007, @08:07PM (#21852372) Homepage Journal
    The entire "Future Combat Systems" of the US Army is based on SOSCoE, a virtual environment that currently runs on linux. It includes development environments for C/C++/Java, but not Microsoft or .NET (yet, anyway). I'm not sure where the meme came in that the DoD is anti-linux. They are certainly proportional in their linux market share as the rest of the world, I'd say.

      • Re: (Score:3, Informative)

        For those that don't know SOSCoE is a closed source attempt (and failure) to allow application to actually talk to each other. ...your tax money being put to good use!
        Well, thank you for your input! After all, what better place is there to get reliable information about classified military systems than from an Anonymous Coward?
  • Haven't the US military been using Solaris with gnu tools since long before Slashdot and linux existed?
  • The military is starting to use open source software in more ways than people on the outside may realize. MediaWiki [mediawiki.org] is used in some interesting ways, as is a certain open source instant messaging platform. Without going into detail on things that are best not discussed outside classified environments, there are other large open source software projects that have made their way into the server room.

    The issue with Microsoft dependency is a long-standing problem having to do with extremely long certification processes. Another issue is the fact that in order to use anything new, the military winds up spending insane amounts of money on retraining personnel, restructuring documentation, testing in live combat environments, etc. Essentially, it's all the major problems of large corporate uptake of open source projects, with additional dependencies.

    Things are slowly improving. The military uses what works, and for much of what we use in our infrastructure solutions developed on Microsoft platforms still work. That's not saying they're necessarily the best answer to a given technology need, but they're already in place and it will take some time for new ideas to get adopted.

  • by MikeRT (947531) on Saturday December 29 2007, @08:18PM (#21852458) Homepage
    Open source software is the only type of software that is often mostly made by foreigners that the DoD will use. Proprietary software that is owned by a foreign company cannot be used without extraordinary extenuating circumstances. Even if the whole development is done in America, the legal ownership by foreign nationals takes the proprietary software automatically off the approved software lists.
  • both the arpanet (essential predecessor to the internet) and bsd unix (essential predecessor to linux) were open source projects funded in large part by darpa, which is the american military. so saying that the military doesn't embrace open source seems kind of wrong.
  • Didn't you mean to write "open-source"?
  • "Convincing"? (Score:5, Informative)

    by Courageous (228506) on Saturday December 29 2007, @08:36PM (#21852562)

    I work as an integrator and inserter of technology into military organizations.

    Hence, I can say with some authority that they are, for the most part, Talready convinced. To best characterize them, it would be: "interested, but cautious". "Convinced, but careful". They want to save money, believe that open source can be good, but have certain matters of due dilligence that they need to attend to.

    There remain "paperwork" issues of getting open source into SCIFs, particularly when the provenance of the open source is questionable. Not all open source is born equal, you know. Some is pretty shitty, and some is even written by people in countries that actually DO have active spying programs against us (if you were to say that because the source is there, and open for everyone to see, that this reduces risk, I would agree with you, however this statement that the risk "ought" to be less is sometimes insufficient for these classified area types, dontcha know).

    BTW, there is a new DoD directive that has been issued, ordering all defense procurement to include an assessment of open source products as an alternative to proprietary software. How is this "not convinced"?

    C//
  • by stewbacca (1033764) on Saturday December 29 2007, @08:55PM (#21852696)
    The Air Force is hell bent on lining the pockets of Dell and Microsoft, with their stupid, COTS (commercial-off-the-shelf) procurement requirements.

    The Army and Marines use a lot of Linux. My company sells software to mostly the Army, and we have lots of Linux developers for a couple of Linux only intel software apps.

    The NSA (and all the branches of service that work in/for it) uses a heavy mix of UNIX and Windows (and the largest chunk of Mac OS X of any gov't agency I know of).

    Bascially, each branch operates in a fishbowl, separate from each other, so it is hard to generalize the Department of Defense's computer uses.

  • by HangingChad (677530) on Saturday December 29 2007, @09:25PM (#21852858) Homepage

    It's a waste of time pitching the Navy anything. NMCI outsourced their entire network infrastructure to EDS. A monumental cesspool of pork barrel contracting that puts Haliburton's Iraq contracts to shame. There are hurdles and endless reviews for getting any piece of software approved for use on Navy or Marine networks. And between SPAWAR and EDS they're busy trying to squeeze out what little internal development is left in the Navy and move everything to the giant hosted service architecture. The very people most likely to use and promote any type of open source software or a project built on open standards are the ones jumping ship and going elsewhere.

    You can waste your time trying to educate DoD if you want but it's maddeningly frustrating. They'll listen and understand, then go off and do something entirely different. Which is a shame because the military is an organization that would benefit the most from an open, flexible infrastructure. One that could scale on demand, integrate disparate information sources and is reliable on legacy hardware. You would think with the massive paperwork hassles of buying anything through the government, the military would pounce on technology that let them side-step the entire procurement process and load it when you need it.

    It would all be funny if it wasn't billions of your tax dollars going down the crapper.

    • by John Hasler (414242) on Saturday December 29 2007, @08:31PM (#21852534)
      Have you ever done a code inspection on a binary? Have you ever written a patch for one?
      • Re: (Score:3, Informative)

        This doesn't apply in the military. If something breaks, it will get fixed pronto or heads will roll at the vendor. In the unlikely event that the vendor is seriously dorked up, I assure you it will still get fixed through other channels. These sorts of mission-critical software failures are not commonly seen in most military environments, however, due to extremely long certification processes for anything that has blinky lights on it.

        As much as I love open source software (my servers run on Debian, my w
        • by L7_ (645377) on Saturday December 29 2007, @08:45PM (#21852634)
          you dont understand. the problem is that with binary distributions, like the majority of COTS software that the DoD/army buys you usually settle on a version number to do all of the testing with. Say, version 1.1. The rest of the system is built around 1.1 and all of its (intended and unintended) functionality. When there is a problem with the software version, commercial vendors fix the problem in the current version. Say you bought version 1.1 in 1997, there is no way that the company is going to sell you 1.1.88 when they are on version 6.0.

          This has nothing to say of the commercial binary distributions that are delivered from companies that are no longer in business... it happens more than you think in the defense industry world. Especially with the late 90's push to buy everything 'COTS'. Say you have version 1.1 of a database layer tool... all of a sudden that company goes out of business, I don't care how 'Mission Critical' the software is, it will never be fixed... since they did not have the source.

          What you need to understand is that the source distribution model is going to change. Open source/GPL'ed code or Apache based FOSS software is going to be delivered by a defense contractor (the ones that will still be in business in 7 years i mean) and take complete authority over the delivered code. This is no different than nowadays when defense companies buy multi-million dollar software packages, delivered as binaries, that they have to maintain responsibility for. Sure, they can pass the buck when the software breaks... but when the defense contractor has the source (and hires a competent enough software engineer (not too common)) then they can make the changes themselves.

          This is what the person is talking about. It doesnt matter that a Chinaman makes the changes to the code, the DoD/military just needs to trust their vendors to authenticate and take responsibility for their software solutions, in house developed, FOSS or closed binary COTS.
    • Re: (Score:3, Insightful)

      You aren't giving the organizations in the military that work with this stuff enough credit. Hint: Your beloved internet started as a military research project. Now think how much farther they have come since then with stuff the private sector won't really see for quite some time (like all other applicable research that come out of the military).
    • Re:No thanks (Score:4, Interesting)

      by idiotnot (302133) <sean@757.org> on Saturday December 29 2007, @09:19PM (#21852824) Journal
      Then stop contributing to GPL projects. The license allows users to do whatever they want with it, to whatever purpose.
    • Re:No thanks (Score:5, Insightful)

      by the linux geek (799780) on Saturday December 29 2007, @09:21PM (#21852834)
      Judging by parent's User ID, I'm going to karma hell for this, but too damn bad.

      When you insert code into something like the Linux kernel, you agree that from that moment on, it is licensed under GPL version 2. That does not mean you have the luxury of deciding who uses it, despite your little political foibles on that topic. "Free software" means exactly that - if the United States Armed Forces opt to use the software, then they have every right to use it. It is no longer in your control.

      On another note, why should you object to having the military using code you've written? You're failing to understand that the men in uniform are under a binding contract, and that they are sacrificing every day to defend their nation. The US Military does not create policy, civilian politicians do - the military is just a tool of policy. They need all the tools at their disposal to do their job of keeping the United States safe, however that job is defined by the politicians.
        • Re: (Score:3, Insightful)

          You've got a great point! In fact, let's take it a bit further. Why should we do ANYTHING to help the military? I say you start a campaign of civil disobedience aimed at destroying the US military's ability to wage any sort of warfare whatsoever. Don't stop until they're down to using shoelaces and plastic forks. I'm sure this will make the entire world a much safer place, and you'll have PLENTY of time to rebuild the military once foreign troops start rolling over your borders! Plus I'm sure it won't
        • So are you saying that keeping the military in a state where it must funnel money to corporate interests is a _good_ thing?

          If the military stopped using MS software all together, it would remove Microsoft as an entity who would gain by increased military expenditure. Thank you for promoting the military-industrial complex.
    • It doesn't sting. It reminds me of my boy when he was 8 years old. We would take him out to nice restaurants where we could get decent food. No matter what was available he wanted the same boring things: chicken nuggets, grilled cheese, cheeseburger.

      I encouraged him to try new things but it's pointless to push it because there's something in the human condition that makes us think any unfamiliar food is toxic.

      So be it. Enjoy your kid's meal. I'll be over here with the diverse selection of culinary cr

      • Re: (Score:3, Informative)

        WTF does chicken nuggets and your kid being a spoilt brat have to do with anything I said?

        can you be more abstract? I think maybe there's a japanese conceptual artist out there that thinks your analogy is good, everyone else thinks it's dumb.