A threat-rigidity analysis of the Apache Software Foundation's response to reported server security issues
Name
71333049-MIT.pdf
Description
Full printable version
Size
11.95 MB
Format
Adobe PDF
Checksum (MD5)
e379bfa80a01f65ec2cfa72948d53c0e
Author(s)
Shapira, Yoav
Advisor(s)
Eric A. von Hippel.
Date Issued
2006
Publisher
Massachusetts Institute of Technology
Abstract
There exists a broad body of literature documenting organizational responses to competitive threats, including those responses which fit into the threat-rigidity hypothesis. The purpose of this thesis is to investigate how a novel organizational form, the open-source software development community known as the Apache Software Foundation, responds to a specific type of threat: security issues reported to exist in its software products. An analysis of publicly available data from the Apache Software Foundation is conducted, the security issue handling process is described in detail, and an analysis on security issue origin, severity, and resolution is provided. Special attention is given to communication along the issue resolution process, as the threat-rigidity hypothesis predicts a reduction in the flow of information across the organization.
(cont.) The results show that this organization defies some central predictions of the hypothesis: there is little reduction in information flow, little or no centralization in decision-making, and no loss of group-level focus. The research results are framed within the literature of user-led innovation and organizational behavior. The implications for traditional software development organizations are discussed, and recommendations for further research are provided.
Description
Thesis (S.M.)--Massachusetts Institute of Technology, System Design and Management Program, 2006.
Page 141 blank.
Includes bibliographical references (p. 84-87).
Subjects
System Design and Management Program.
MIT Department
System Design and Management Program.
Terms of Use
M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission.
Persistent DSpace Link
