[AppSec Case Study] Ensuring Open Source Compliance With Black Duck Software Composition Analysis [Video]

Overview

Magneti Marelli, a multibillion-dollar international component and systems supplier to the automotive industry, successfully implemented Black Duck^® Software Composition Analysis (SCA) to ensure that its GENIVI-based in-vehicle infotainment system fulfills the strict open source compliance expectations of its OEM customers.

Rubens Sarracino

|

Magneti Marelli

The challenge

A major European car manufacturer contracted Magneti Marelli to develop an invehicle infotainment (IVI) system based on the GENIVI Alliance open source platform. The agreement for the project stipulated strict compliance with GENIVI rules and free and open source software license requirements. The manufacturer would not accept product delivery without clear proof of compliance.

Work on the system, underway for more than two years, had resulted in the accumulation of 7-8 million lines of code. The vast majority of the code had been developed by Magneti Marelli and …