Two interesting articles from CIO.com

Two things from CIO Insider:

(1) SAP's Ecosystem is thriving.

(2) It is possible to build an Open Source Business.

Beware Complex Systems

Complex Systems, not just hackers, are the biggest problem in Information Systems.

Another blog to keep an eye on

I have had the opportunity to meet Gianugo Rabellino at the 2007 Open Source Think Tank and found him to be quite congenial and intelligent. His blog confirms my impressions of him, as it offers commentary on many issues that I find interesting, especially his frequent and impassioned defense of the BSD and Apache licenses (which is no surprise as Vice President and PMC chair for the Apache XML Project).

OSS Ecosystem Presentation (not by me)

An OSS developer at 55thinking.com has come up with a presentation on open source ecosystems. While I think it is a beautiful presentation, I think it is a good overview of the 'correct' approach one needs to take with respect to getting into open source.

Open Source Ecosystems Research

In doing a scan of open source related news and blogs, I came across Alex Fletcher's blog posting on open source ecosystems. Imagine my surprise, since my dissertation is directly concerned with this very topic (and I've blogged Alex on a similar subject before). I admit it is a fairly involved set of concepts, but it can be boiled down pretty simply. Thus, the paragraphs that follow are a very, very brief summary of the framework and results of my research as it relates to open source ecosystems.

Generically, we can define an ecosystem as it is defined in Ecology: as a set of communities and the surrounding environment forming an interacting system. A community in turn is a set of populations of species living closely enough together for the potential of local interaction, or alternatively, the populations that are found in a defined region. Within previous organizational literature, a community is a bounded set of similar organizational forms (c.f. Ruef).

By contrast, an ecosystem consists of the various populations and communities of these similar species that interact within a given region along with the elements of the environment that affect these interactions. The two terms (ecosystem and community) are a conceptual cluster (Jax 2006) that result in two terms so similar as to be nearly synonymous. Here, we view ecosystems as being more inclusive than communities, reserving the latter for subsets of the ecosystem that exist and interact largely independent of the larger ecosystem.

In software, there are (at least) two communities that matter: the development community that includes those who write the software, testers, and support staff as well as those of the components that are included in the final product, and the user community that includes the end users (OEM/ISV, end users, and consulting partners), not to mention the CEO/CIO/management team of these organizations. The temptation is to combine both sets of people in a single community, but in reality we find that these developers interact with the end users only rarely, especially those for upstream component providers. Pursuant to our previous definition of communities as existing and interacting independently of each other, we find in reality that the developers largely work separately from the efforts of the sales/marketing team on the user side particularly as the organization grows in size.

With that as a background, applying the term 'ecosystem' to open source would include more than downloaders, QA testers, and source code committers. Additionally (especially in the current commercial open source environment), we have to include corporate CIOs, analysts (yourself included, of course), investors/VCs, competitors (e.g. IBM and Oracle), sponsors (e.g. IBM and the Apache Software Foundation), and a wide range of customers from perspectives such as OEMs, ISVs, end users, and more. We continue to define the OSS ecosystem in terms of developers (including the QA testers and committers and others) and users. Forrester Research includes four functions around open source: product development, distribution, services, and marketing. All of these are required by somebody in the ecosystem whether that is a central firm or the members themselves.

The problem is not necessarily in identifying or quantifying these members of the ecosystem at large, but in fully defining their contributions and inducements. In other words, what do they provide and why do they do so? For instance, why does IBM participate in the Geronimo project and what do they provide? How they provide the sponsorship and services they provide is a tactical issue that can be identified from the various analyst and media reports. But the reasons behind the decision are not always so obvious. Would IBM have participated in the Apache project so heavily if the ASF had standardized around the GPL license instead of a BSD derivative? Would they have participated in Geronimo specifically if JBoss had not done so well? Have they been able to appropriate the anticipated benefits of the Gluecode acquisition yet?

Similar questions can be asked for any participant in an open source ecosystem. In the final analysis, it boils down to a question of the health of said ecosystem. What makes one ecosystem more healthy than another? What I have found (so far) in my research is that the health of an open source ecosystem is based on three issues. One, how much productivity (vigor) exists in terms of the capital being invested, produced, transformed, and exchanged. It is important to note that capital includes more than just money, but intellectual/human capital, reputation capital, and more. Two, how organized is the ecosystem. A loosely connected band of developers and users are not as healthy as one in which the communications and exchange pathways among the members of the development and user communities are solid and repeatable. Third, how resilient is the ecosystem. Mere stability implies that an system can remain at a given level of functionality but resilience implies that it can adapt and recover from significant changes in the system.

In a later post (or send me an email at dewynn at uga dot edu for an advance "Cliffs note" summary), I will discuss the concept of a 'mechanism' and how successful (healthy) open source ecosystems have been able to develop and use specific types of mechanisms to improve and maintain their health.

More on SW Ecosystems (long)

In this article, the author presents ecosystems as consisting of the partners that surround and support a software package. In this blog posting, the author presents several different components of open source ecosystems, including ISVs and other downstream firms. In yet another article, Business Week includes customers, stack aggregators such as SpikeSource, and (to some degree) the VCs. In a typically comprehensive fashion, Gartner defines an open source ecosystem explicitly as
the set of policies, processes, individuals and organizations that can influence, support, staff, finance, train, and educate users and developers of a community for the purpose of making it self-sustainable over a period of time that is compatible with the life cycle of technology investments for the user community.

Finally, Forrester Research says that
"An open source ecosystem is emerging that serves the same functions as a traditional software company — but through multiple organizations. In the past, your software supplier would supply the software, support, maintenance, training, and consulting. The new open source ecosystem provides these services through communities, companies, consortia, and other means. As a result, customers have access to the same services they are used to from traditional suppliers, but they have to understand how to make the open source ecosystem work for them." (note: I do not have access to these Forrester reports as they costs $795 which is not in my budget. However, slides corresponding this first link can be found here.)

Forrester also says that
An open source ecosystem is emerging, however. Though this open source ecosystem is made up of many new types of organizations, such as communities and consortia, the organizations deliver the same four functions as closed source vendors: product development, distribution, services, and marketing. This map of open source players will enable firms to follow a practical approach to build their own open source ecosystem to suit their software needs.

All these quotes leave me with the impression that (a) there is something to the concept of an ecosystem in open source and more generally, in software, (b) the ecosystem concept must include a wide range of participants/units/members/etc., and (c) there is a lot of resource flow in a healthy ecosystem but measuring it will be a hot mess. And I'm just the man for the job.

The needs of the Security Profession

CIO magazine published an article on the new required skills for security professionals, including a business acumen (perhaps an MBA) and a basic understanding of psychology. Interesting reading to keep in mind when we begin to build a security curriculum"

Successful Open Source Companies

Yes, the focus of the title of this post is on the companies, but I would argue that much of the discussion is (of course) on the ecosystems surrounding them. Two links here, which I will do my best to summarize a little later (but I did not want to lose the links):
I'm sure there are other posts out there (in particular,look through Matt Asay's interesting and voluminous blog posts), but these will do for now. I'll recap and summarize later.

Last post (for tonight) on the OSS ecosystem

Matt Asay discusses a ZDnet article on the "War of the Ecosystems" that makes several points that I should keep in mind when developing a presentation on this stuff.

Further on the "open source ecosystem" chain

Speaking of the blog by the "Director of Ecosystem Development for the Eclipse Foundation", he posted an entry discussing an interesting study on the success of OSS projects, in which he made the following comment:
To me, success would be a healthy ecosystem with lots of commercial and non-commercial activity. This would be pretty difficult to measure, not only to find publicly available data, but because it's not clear how to measure the "health" of an ecosystem. There is hopefully an opportunity for research in this area moving forward. (emphasis added)

BINGO! I think I have an interested reader here...I DEFINITELY need to give him a shout out when I get close to an answer.

The Open Source Forge trend

BTW: another sign of OSS growth is the tendency toward a 'forge', as used by Ruby, SugarCRM, MuleSource, and others in addition to the original - Sourceforge. From what my 'insiders' are telling me, this is a developing trend.

More on Open Source Ecosystems

There are other sites out there discussing the phrase 'open source ecosystems'. Here are a few interesting ones:

  • An interesting post by one of the guys who helped develop Ruby on Rails, which is a great new OSS language for Web 2.0.

  • A news article about the importance of third parties such as Pervasive to form an ecosystem around open source projects (in this case around PostgreSQL.

  • A 2005 research article by IBM stating (among other things) that an open source project "needs to build an ecosystem" in order to reach a critical mass for viability.

  • What looks like a wiki-evolving definition (or is that 'wikivolving'- is that a word yet? should I TM it?) of an open source business ecosystem on ObjectWeb.

  • A blog from a guy whose job is Director of Ecosystem Development for the Eclipse Foundation. (I ought to try to ring him up sometime just for a chat)

  • A presentation on Collaboratively Evolving Ecosystems in the context of government-sponsored open source projects, essentially laying out the case for moving from "N*build to 1*build + N*improve" (an interesting way to look at the benefits of OSS.


All this to suggest that I am certainly not the originator of the term nor the only one interested in it. Here's hoping I can add to the conversation in a truly meaningful way.

Linux Ecosystem to be worth $40B, per IDG

According to this report by IDG, the Linux ecosystem will be worth $40B by the year 2010. The actual figure is not as interesting as the fact that they used the term 'ecosystem', which is pretty cool.

My favorite Wikipedia page

OK, it is not related to my dissertation (at least not directly), but I like this Wikipedia page very much. Especially the quote from Dr. Frankfurt's book:
It is impossible for someone to lie unless he thinks he knows the truth. Producing bullshit requires no such conviction. A person who lies is thereby responding to the truth, and he is to that extent respectful of it. When an honest man speaks, he says only what he believes to be true; and for the liar, it is correspondingly indispensable that he considers his statements to be false. For the bullshitter, however, all these bets are off: he is neither on the side of the true nor on the side of the false. His eye is not on the facts at all, as the eyes of the honest man and of the liar are, except insofar as they may be pertinent to his interest in getting away with what he says. He does not care whether the things he says describe reality correctly. He just picks them out, or makes them up, to suit his purpose.

Classic. Reminds me of what most scholars do (whether they know it or not) when they write.

Oops...perhaps that's bullshit.

Marc Fleury has left the building

Its official - Marc no longer works for Red Hat. After selling his company for $420M in 2006, what else was there for him to do? He has long despised the role of middle manager, which in many respects he would have become - albeit a very high position in that middle. He would no longer really be 'the man', but only 'the man sitting next to the man'. I could not see Marc going out like that.

Besides, some reports have him personally getting as much as $150M out of the deal, which is pretty darn good after he started the company in 1999. I would love to be so lucky, but I cannot think on that scale. Kudos to Marc, but I can't wait to see what he comes up with next - in addition to his techno DJ career, that is.

Security Breaches and compensation

The University of Georgia had a security breach recently, which was very lightly covered by the media. In response to the breach, you get the standard fare of apologies and news releases (just like we saw in the Ohio University breach last year...but no remuneration for credit report freezes or any other incurred expense by the people whose information was compromised. Why not?

Help! We're under attack!

Posted on CNN and elsewhere, 3 of the 13 'key Internet computers' were were under attack by a massive hack attack. According to the CERT center,
At approximately 0001 GMT on 6 Feb 2007, several root-level DNS servers began receiving a large volume of malformed DNS queries. This initial attack appears to have been a warm-up for a much larger attack that began at 1000 GMT.

DNS servers G (U.S. DOD Network Information Center), L (Internet Corporation for Assigned Names and Numbers), and M (WIDE Project) appear to have been the most severely impacted although none were ever unreachable. The servers were operational and reachable even with the high volume of traffic.

Fortunately, we internet users did not know what was hitting us. Unfortunately, this is becoming more and more likely. Buckle up.

Successful OSS firms

Interesting read from Information Week on How To Tell The Open Source Winners From The Losers. Don't miss the sidebars.

You gotta be kidding me...8 seconds???

How long would it take for a newly internet-attached PC to be attacked by the silent army of hackers around the world? Sadly, the answer according to
this BBC article from 2005 is "eight seconds". Think about it: "1-Mississippi, 2-Mississippi, 3-Mississippi, 4-Mississippi, 5-Mississippi, 6-Mississippi, 7-Mississippi, 8-Mississippi" - and you're hacked. Sobering thought, especially for those who hate anti-virus software packages (and I am one of them).

In some ways, this is an old story - even for the BBC, but the results are still alarming.

What I would study if I were not in MIS...

Contrary to the central notion of this blog, which is to keep track of opportunities for practical, relevant research in MIS for future usage and study, I am absolutely in love with the philosophy of science. It appeals to the egghead inside me that wants to leave a scholarly mark on the world. And yet, there is something so distant and archane about the way these things are approached. For instance, one of the "open problems in Philosophy", is the Demarcation Problem, which essentially is an attempt to find the line between science and non-science (and yes, there is much more to the story than that). As an application of this notion to MIS, I wonder if we can really call most of what is done in business schools a 'scientific' endeavor. Note that I am not questioning the value or relevance, only whether or not we can really call it 'science'. (Note to self: look at this book by Curd and Cover later.

Of course, I can still study this as a MIS professor, but it sure isn't going to help much in the way of publishing things for tenure - which is the first goal.

Microsoft Office 'Zero-Day' Attack

Slashdot reports that the new version of Microsoft Office is already under attack. No surprise there -- and I am not blaming Microsoft. Why attack Open Office when there are so few users? Why not attack MSFT Office and its legion of well-placed (meaning Corporate) users?

Usable Security

Interesting report on how Bank of America's Sitekey doesn't work as well as it should. This and other reports can be found at this conference which is formed around different aspects of 'usable security'. In some respects, this deals with similar earlier work (ACM membership required - mirror copy here) by Mary Ellen Zurko on User-Centered Security - which she has apparently updated recently.

No more whining

In response to the previous post entitled "Coding Sucks", this blog has officially become a "No Whining Zone".

On second thought, isn't that one of the purposes of having a blog...to whine???

Coding Sucks!!


Given my current coding framework, I will need to come up with codes for a metaschema that will need to fit the following basic format:


{unit} {predicate} {resource1 [, resource2]}


Where there are (at least) 5 units not including the individuals themselves, 5 predicates (including contributes, accumulates, uses, exchanges, and transforms; the latter two require the second resource), and over 10 resources (more like 18-20) of three types (capital, goods, and services).


This level of 'micro-analysis' cannot be necessary. Unfortunately, my advisor (who I respect highly, mind you) says that it is absolutely necessary for the next round of analysis. Bummer... Looks like it's time for another quote by Ovid:

Endure and persist; this pain will turn to good by and by.

What a good week...so far


What a difference a week makes! I can now see clearly to what I have to do to get out of here.
  • No, I do not have a good coding template yet, but I am well on the way to having one. The new, new one has a lot of good points going for it, but I will have to go back over it again, which sorta stinks but is better than the previous one.
  • The interviews since 1/24 (four, with 2 more for this week and one to reschedule) have been outstanding! I can honestly say that I have learned a lot about the cases that I have been studying and also about the software industry in general. Lots of good info on all fronts!
  • Received official invitation to a think-tank that will cover the area that I am doing for my dissertation and my writing for the next 4-5 years. Should be an excellent way to get some great contacts. I can even see how this could lead to some personal equity-building activities.
  • Wrote a brief which should set up my dissertation writeup, which my advisors think would be ok. Additionally, they want to work on a separate case, which should satisfy the aspirations of the CEO of the case firm.
  • Worked on two other non-dissertation related projects, both of which should lead to publications.
A great, great week indeed! Now for the next week, I need to work very, very hard on coding and data analysis to see if I will be able to produce some meaningful insights...

Failure to meet goals

What a failure. I did not meet the goals stated for the previous week. Not even close. But I have had some successes, though. I conducted four interviews, with another set for tomorrow. I have 1 scheduled for next week with two other interviews very likely. I got good news on two other publications, one that I did not know I was a part of. I have plenty of work to do in addition to this dissertation stuff, but I insist on completing this one. I also got invited to a very, very nice conference in Napa, CA that will do wonders for my professional contacts in the next line of research. Wonders, I tell you.

But I have not finalized my coding scheme or coded more interviews. THAT is disgusting.

I am not making new goals for the upcoming week other than to work as hard as I can!

Anything else is clearly unacceptable.

** EDIT: 5/3/2008: Image removed.

More Fun Less Fear


I love cute and apropos quotes and witty sayings and little mottos as a way to give me a really quick motivation at the right moment.

Recently, I came across a mini-poster site on Uamou's blog via Moleskinerie. Without permission, yet with appropriate attribution (go visit her blog - nice pictures!), I am displaying it here. I think the motto for the entire year should be "This year, more fun less fear".

This Week's Goals



My Goals for this week (January 15-21) are as follows:

Bottom line is that I need to catch up with the pace of my data collection/cleanup/analysis and a little bit on my writing. Thus, the goals are broken down into those steps, along with a few 'other' items.

Data Collection -
1. Conduct 3 interviews by the end of the week (2 are scheduled)
2. Try to make contact with some of the newly released executives of Site 2 (JBoss) - and schedule a few new interviews if possible
3. Send 8-9 more interviews to SW, including the new interviews. The first 5 should go out on Monday, not including 1 additional one for CF (if she has made progress on the other one)

Data Cleanup -
4. Correct the transcriptions on 2 interviews (e.g. Richard 1, Richard 2) - I may want to wait on this until finishing the current batch of analysis below

Data Analysis -
5. Hand-code 3 more interviews
6. Enter hand-codes for 5 interviews into Atlas

Writing
-
7. Write summaries for (at least) 5 interviews
8. Write up more notes on Explanatory Case Analysis (from Yin, Maxwell, Michael Friedman 1974)

Other -
9. ISDSA Meeting on Tuesday (Agenda out by Monday night - meet with Renee on Monday)
10. PAM questionnaire complete by Wednesday night
11. Conversation with Christina, Marlene re:post data on infusion pump survey (and what is the value for me at this point??)
This will require a heavy, heavy week of work, but I'm just the man for the job. Noone else will do it for me. Now let's compare this week's progress by next Sunday night.

"Auuuugggghhh!!!"

Today's daily blog faffing brings news that several executives from the second and final case site for my data collection have been dismissed in a less than positive fashion. Unfortunately, this probably includes at least six people from my target list. I believe Charlie Brown put it best as Lucy - yet again - pulled the football away from him at the last possible moment: "AUGHHH!"

Who knows what this will do for my data collection efforts? So far, I have conducted a mere seven of the approximately 30 interviews that I want to get for that case, with three more scheduled over the next couple of weeks. One of the interviewees from this week will be the one who 'broke' the story over the blog, so he may be a possible intermediary to get in touch with some of the folks who have been dismissed. I can also contact the old CEO (who has become perhaps the wealthiest house DJ in the world) or the old COO to see if one of them can introduce me.

If neither works and I am forced to go over to another case site, I have a site in mind, but there is little chance of me getting in contact with 30 people soon enough to get sufficient data to prove my case. Then I will be forced to discuss things like having one main case and two mini-cases in support of the main case (a la Leonard-Barton 1989).

Oh well...I didn't want a publishable dissertation anyway.

One at a time, dude

I have made a little progress on my dissertation in that I have scheduled a few more interviews on my second site, three of which promise to be very, very interesting. However, I had also hoped to get eight more interviews but the people have not responded to me. I am having to learn to be patient. I will also have to learn to play the connections from the other end - through personal introductions rather than through trying to make the connections myself.

I have not done any new coding/analysis passes though. Unfortunately life has been extra busy. Today we did a science project for my son. The data and analysis was pretty well done (not precisely enough for 'real science' but probably good enough for a fourth grade project), but I fear that he will not be able to get an acceptable conclusion out of it. Oh well - he may not win, but at least he has a good idea about scientific method.

Also, the car has a major anti-freeze leak that will demand attention (and money) on Monday, so there goes that day. Tuesday, I have a meeting with Maric but I need to read/write a bit before then. I also need to try to get those other interviews scheduled. Add to that the fact that I am having a few more aches and pains than normal (getting old) and I need to address some critical financial issues, and voila' - I am covered up with stuff to do and I am stressed out! How in the hell am I going to finish this dissertation without killing myself?!

Answer: One at a time.

One day at a time, one interview at a time, one transcription at a time, one coding pass at a time, one word at a time, one page at a time, one section at a time, one chapter at a time.

One at a time.

Running Spreadsheet of Data Progress

I have edited the template for this blog (using the new Google tools) to put a running spreadsheet of my data collection and analysis progress at the top of the page. Very nice feature!

To date, I have conducted only 46.6% of my interviews - I have a looong way to go. Let's see where the number will be at the end of January. Target: 80-90%.

2006 in Review: Accomplishments

This post is to remind myself of all the things that I did in 2006 - just as a reminder that I am not a total idiot even though the dissertation process can make you feel like one.

1. Defended my dissertation proposal.
2. Published a book chapter, a marketing article (actually submitted in 2005), a nursing conference paper, and two MIS articles (CAIS). One other article on education is under review.
3. Ran a successful mini-track (with other folks) and agreed to run the mini-track for a third year.
4. Coordinated the first round of revisions on a special issue of a journal (with two others).
5. Taught two classes for the second time each: data management and network management.
6. Got a job in a tough market (perhaps the most important thing on the list, workwise).
7. Did two trips for my dissertation. Three if you count Evergreen as a pilot study (and I will!)
8. Got most of the data collected for my first case study site. Most, but not all.
9. Helped put a conference together for the ISDSA and ran (successfully) for President this year.
10. Learned quite a lot about qualitative research, ecology/ecosystems, and [critical] realism for my dissertation.
11. Watched my kids get older, taller, bigger, smarter, etc. - which is the most rewarding thing on this list.

All in all, not a bad year for a doctoral student!!

Cities I visited in 2006

These are places that I visited at least once this year
(Just because I felt like reminiscing for a minute or two):

Nashville, TN (parents) - 3x
Dayton, OH (job interview, another visit) - 2x
Greenville, MS (inlaws) - 2x
Mobile, AL (funeral)
Las Vegas, NV (JBoss World)
Orlando, FL (Pentaho site visit)
Warner Robbins, GA (PINES conference)
Chicago, IL (PhD Project conference, funeral) - 2x
Acapulco, Mexico (AMCIS)
Milwaukee, WI (ICIS)
Lake Geneva, WI (ICIS consortium)

I think that is it...but I may revise the list later if I remember something.

Not bad on a student budget, though: 16 trips, 11 cities, 9 states, 1 foreign country. This year will be a little bit lower. I am expecting to do maybe the following:

Orlando, Keystone CO, Chicago (maybe 2x), Dayton, Nashville, Greenville, and Montreal, Canada. If we are lucky, we will squeeze another family trip in there for the fun of it, but who knows?

Weekly Goals

If I am going to succeed in this dissertation endeavor, I will have to make regular progress toward getting finished. To that end, I will need to meet regular weekly goals, which I will record here for my own benefit.

Writing: I need to write at least 5 hours per week on the existing chapter revisions, data analysis writeups, or other parts as they arise.

Data Collection (including transcription and cleanup): I will need to do about 20-25 hours per week on these parts, especially for the next 60 days.

Data Analysis (including coding, summarizing, memos, and other parts): Until the data collection is done, I will need to spend about 20 hrs per week here, doubling as the collection is done.

If I don't finish by May (which will be a minor inconvenience), August is a very real possibility...but I STILL need to be busy as hell.