Taxonomy of technological risks of open source software in the enterprise adoption context

Information and Computer Security

Volumn 23, Issue 5, 2015, Pages 570-583

  Silic, Mario ^a   Back, Andrea ^a   Silic, Dario ^b  

^a UNIVERSITY OF ST GALLEN   (Switzerland)

^b ZAGREB SCHOOL OF ECONOMICS AND MANAGEMENT   (Croatia)

Author keywords

Organizational decision making; Risk

Indexed keywords

EID: 84946032225     PISSN: None     EISSN: 20564961     Source Type: Journal    
DOI: 10.1108/ICS-08-2014-0056     Document Type: Article

References (48)

1. Ackermann, T., Miede, A., Buxmann, P. and Steinmetz, R. (2011), " Taxonomy of technological IT outsourcing risks: support for risk identification and quantification ", ECIS, Helsinki.
2. Ågerfalk, P.J., Deverell, A., Fitzgerald, B. and Morgan, L. (2005), " Assessing the role of open source software in the European secondary software sector: a voice from industry ", Proceedings of the 1st International Conference on Open Source Systems, Genoa, pp. 82-87.
3. Aspect Security (2013), " The unfortunate reality of insecure libraries ", available at: www.aspectsecurity.com/uploads/downloads/2012/03/Aspect-Security-The-Unfortunate-Reality-of-Insecure-Libraries.pdf (accessed September 2014).
4. Bahn, D. and Dressel, D. (2006), " Liability and control risks with open source software ", Information Technology: Research and Education, ITRE'06. International Conference, IEEE, pp. 242-245.
5. Cohen, J. (1968), " Weighted kappa: nominal scale agreement provision for scaled disagreement or partial credit ", Psychological Bulletin, Vol. 70 No. 4, p. 213.
6. Del Bianco, V., Lavazza, L., Morasca, S. and Taibi, D. (2011), " A survey on open source software trustworthiness ", Software, IEEE, Vol. 28 No. 5, pp. 67-75.
7. Deloitte (2012), " Open mobile survey ", available at: www.deloitte.com/assets/Dcom-Turkey/Local%20Assets/Documents/turkey-tr-tmt-openmobile-220212.pdf (accessed September 2014).
8. Dewey, M.E. (1983), " Coefficients of agreement ", The British Journal of Psychiatry, Vol. 143 No. 5, pp. 487-489.
9. Faisst, U. and Prokein, O. (2005), " An optimization model for the management of security risks in banking companies ", E-Commerce Technology, CEC 2005, Seventh IEEE International Conference, IEEE, Munich, pp. 266-273.
10. Federspiel, S.B. and Brincker, B. (2010), " Software as risk: introduction of open standards in the Danish public sector ", Information Society, Vol. 26 No. 1, pp. 38-47.
11. Fitzgerald, B. and Kenny, T. (2004), " Developing an information systems infrastructure with open source software ", Software, IEEE, Vol. 21 No. 1, pp. 50-55.
12. Franch, X., Susi, A., Annosi, M.C., Ayala, C., Glott, R., Gross, D., Kenett, R., Mancinelli, F., Ramsamy, P. and Thomas, C. (2013), " Managing risk in open source software adoption ", Proceedings of 8th International Conference on Software Engineering and Applications (ICSOFT-EA 2013), SciTePress, Reykjavik.
13. Goode, S. (2005), " Something for nothing: management rejection of open source software in Australia's top firms ", Information & Management, Vol. 42 No. 5, pp. 669-681.
14. Gouscos, D., Kalikakis, M. and Georgiadis, P. (2003), " An approach to modeling web service QoS and provision price: web information systems engineering workshops (2003) ", Proceedings of Fourth International Conference, IEEE, Rome, pp. 121-130.
15. Gregor, S. (2006), " The nature of theory in information systems ", MIS Quarterly, Vol. 30 No. 3, pp. 611-642.
16. Hauge, Ø., Ayala, C. and Conradi, R. (2010a), " Adoption of open source software in software-intensive organizations: a systematic literature review ", Information and Software Technology, Vol. 52 No. 11, pp. 1133-1154.
17. Hauge, Ø., SØrensen, C.F. and Conradi, R. (2008), " Adoption of open source in the software industry ", Open Source Development, Communities and Quality, Springer, US.
18. Hauge, O., Cruzes, D.S., Conradi, R., Velle, K.S. and Skarpenes, T.A. (2010b), " Risks and risk mitigation in open source software adoption: bridging the gap between literature and practice ", in Agerfalk, P., Boldyreff, C., Gonzalezbarahona, J.M., Madey, G.R. and Noll, J. (Eds), Open Source Software: New Horizons, Springer, Berlin.
19. Hayes, A.F. and Krippendorff, K. (2007), " Answering the call for a standard reliability measure for coding data ", Communication Methods and Measures, Vol. 1 No. 1, pp. 77-89.
20. Henderson, J. (2005), " Google scholar: a source for clinicians? ", Canadian Medical Association Journal, Vol. 172 No. 12, pp. 1549-1550.
21. Howard, J.D. and Longstaff, T.A. (1998), " A common language for computer security incidents ", Sandia National Laboratories.
22. Jaaksi, A. (2007), " Experiences on product development with open source software ", Open Source Development, Adoption and Innovation, Springer, US.
23. Mcghee, D.D. (2007), " Free and open source software licenses: benefits, risks, and steps toward ensuring compliance ", Intellectual Property & Technology Law Journal, Vol. 19 No. 11, p. 5.
24. March, S.T. and Smith, G.F. (1995), " Design and natural science research on information technology ", Decision Support Systems, Vol. 15 No. 4, pp. 251-266.
25. Morgan, L. and Finnegan, P. (2007a), " Benefits and drawbacks of open source software: an exploratory study of secondary software firms ", Open Source Development, Adoption and Innovation, Springer, US.
26. Morgan, L. and Finnegan, P. (2007b), " How perceptions of open source software influence adoption: an exploratory study ", Proceedings of the 15th European Conference on Information Systems (ECIS), pp. 7-9.
27. Nagy, D., Yassin, A.M. and Bhattacherjee, A. (2010), " Organizational adoption of open source software: barriers and remedies ", Communications of the ACM, Vol. 53 No. 3, pp. 148-151.
28. Nickerson, R.C., Muntermann, J. and Varshney, U. (2010), " Taxonomy development in information systems: a literature survey and problem statement ", AMCIS, Lima.
29. Nickerson, R.C., Varshney, U. and Muntermann, J. (2013), " A method for taxonomy development and its application in information systems ", European Journal of Information Systems, Vol. 22 No. 3, pp. 336-359.
30. North Bridge Venture Partners (2013), " Future of open source software ", available at: http://northbridge.view.huntandgather.com/open-source/survey-2011 (accessed September 2014).
31. Perens, B. (1999), " The open source definition ", Open Sources: Voices from the Open Source Revolution, O'Reilly & Associates, US, pp. 171-185.
32. Rudzki, J., Kiviluoma, K., Poikonen, T. and Hammouda, I. (2009), " Evaluating quality of open source components for reuse-intensive commercial solutions ", Software Engineering and Advanced Applications (2009), SEAA '09: 35th Euromicro Conference, Patras, 27-29 August 2009, pp. 11-19.
33. Schryen, G. (2011), " Is open source security a myth? ", Communications of the ACM, Vol. 54 No. 5, pp. 130-140.
34. Schweik, C.M. and English, R.C. (2012), Internet Success: A Study of Open-Source Software Commons, MIT Press, US.
35. Silic, M. (2013), " Dual-use open source security software in organizations-Dilemma: help or hinder? ", Computers & Security, Vol. 39, Part B, November 2013, pp. 386-395.
36. Silic, M. and Back, A. (2013), " Information security and open source dual use security software: trust paradox ", Open Source Software: Quality Verificatio, Springer, Berlin.
37. Silic, M. and Back, A. (2015), " Identification and importance of the technological risks of open source software in the enterprise adoption context ", 12th International Conference on Wirtschaftsinformatik (2015), Osnabrück, Germany, pp. 1163-1176.
38. Simon, H.A. (1996), The Sciences of the Artificial, MIT Press, US.
39. Slovic, P.E. (2000), The Perception of Risk, Earthscan Publications, US.
40. Tiangco, F., Stockwell, A., Sapsford, J., Rainer, A. and Swanton, E. (2005), " Open-source software in an occupational health application: the case of Heales Medical Ltd ", Procs, Vol. 1, pp. 130-134.
41. Van Rooij, S.W. (2007), " Perceptions of open source vs commercial software: is higher education still on the fence? ", Journal of Research on Technology in Education, Vol. 39 No. 4, pp. 433-453.
42. Ven, K. and Mannaert, H. (2008), " Challenges and strategies in the use of open source software by independent software vendors ", Information and Software Technology, Vol. 50 Nos 9/10, pp. 991-1002.
43. Ven, K. and Verelst, J. (2012), " A qualitative study on the organizational adoption of open source server software ", Information Systems Management, Vol. 29 No. 3, pp. 170-187.
44. Ven, K., Verelst, J. and Mannaert, H. (2008), " Should you adopt open source software? ", Software, IEEE, Vol. 25 No. 3, pp. 54-59.
45. Vom Brocke, J., Simons, A., Niehaves, B., Riemer, K., Plattfaut, R. and Cleven, A. (2009), " Reconstructing the giant: on the importance of rigour in documenting the literature search process ", ECIS, Verona, pp. 2206-2217.
46. Webster, J. and Watson, R.T. (2002), " Analyzing the past to prepare ", MIS Quarterly, Vol. 26 No. 2, pp. 13-23.
47. Wheeler, E. and Swick, K. (2011), Security Risk Management: Building An Information Security Risk Management Program From the Ground Up, Syngress, US.
48. Whitman, M. and Mattord, H. (2011), Principles of Information Security, Cengage Learning, US.