开源软件的网络安全问题——以开源协议与进出口监管的冲突展开

Open Source Software Cybersecurity Issues: Starting From Open Source Agreements and Conflict with Import and Export Supervision

开源软件网络安全的法律问题受到境外的进出口监管和境内《网络安全法》的双重考验。境外国家基于主权的出口规则穿透并从软件、源码、人员、平台等角度分别对开源进行监管,本国《网络安全法》的体系规则则对开源的繁荣与安全之间的平衡重新设定了评价机制。在两者多因素作用下,开源软件的网络安全实践活动需要审慎调整以迎合或规避监管规则变化带来的深刻挑战。

The legal issues of open source software cybersecurity face the dual challenges of import and export supervision and domestic Cybersecurity Law. Foreign countries set export rules based on sovereignty and regulate open source penetratingly from the perspectives of software, source code, personnel, and platform. The domestic system of Cybersecurity Law on the other hand, re-establishes the evaluation mechanism for the balance between open source prosperity and security. Under the multiple factors of both, the cybersecurity practice of open source software needs to be carefully adjusted to avoid the risks brought about by changes in rules.