misp-website/_pages/license.md

39 lines
4.2 KiB
Markdown
Raw Normal View History

---
layout: page
title: MISP, Overview of the licenses used in the MISP Project (software, libraries and knowledge base)
permalink: /license/
toc: true
---
# MISP, Overview of the licenses used in the MISP Project (software, libraries and knowledge base)
The MISP project is a large open source project, aiming to support and improve information sharing and threat intelligence analysis at large.
As the MISP project is used in different geographical regions (Europe, North America, Asia-Pacific, South America and Africa) as well as different sectors of activities (spanning a wide selection such as cyber security, intelligence community, law enforcement and NGOs), we provide detailed information about the open source licenses used by the various part of the projects.
# Open Source Licenses Used
The MISP projects use different open source licenses depending of the use-cases of the software, library or knowledge base. All the open source licenses used are approved by the OSI and classified as Free/Libre by the Free Software Foundation.
|MISP Repository| License | SPDX Identifier
|:-:|:-:|---|
|[MISP core software](https://github.com/MISP/MISP)|GNU Affero General Public License v3.0 or later|[AGPL-3.0-or-later](https://spdx.org/licenses/AGPL-3.0-or-later.html#licenseText)|
|[MISP objects](https://github.com/MISP/misp-objects)|GNU Affero General Public License v3.0 or later|[AGPL-3.0-or-later](https://spdx.org/licenses/AGPL-3.0-or-later.html#licenseText)|
|[MISP taxonomies](https://github.com/MISP/misp-taxonomies)|Dual licensed: CC0 1.0 Universal (CC0 1.0) or BSD 2-Clause "Simplified" License|[CC0-1.0](https://spdx.org/licenses/CC0-1.0.html) or [BSD 2-Clause "Simplified" License](https://spdx.org/licenses/BSD-2-Clause.html)|
|[MISP galaxy](https://github.com/MISP/misp-galaxy)|Dual licensed: CC0 1.0 Universal (CC0 1.0) or BSD 2-Clause "Simplified" License|[CC0-1.0](https://spdx.org/licenses/CC0-1.0.html) or [BSD 2-Clause "Simplified" License](https://spdx.org/licenses/BSD-2-Clause.html)|
|[MISP warning-lists](https://github.com/MISP/misp-warninglists)|Dual licensed: CC0 1.0 Universal (CC0 1.0) or BSD 2-Clause "Simplified" License|[CC0-1.0](https://spdx.org/licenses/CC0-1.0.html) or [BSD 2-Clause "Simplified" License](https://spdx.org/licenses/BSD-2-Clause.html)|
|[MISP decaying models](https://github.com/MISP/misp-decaying-models)|Dual licensed: CC0 1.0 Universal (CC0 1.0) or BSD 2-Clause "Simplified" License|[CC0-1.0](https://spdx.org/licenses/CC0-1.0.html) or [BSD 2-Clause "Simplified" License](https://spdx.org/licenses/BSD-2-Clause.html)|
|[MISP modules](https://github.com/MISP/misp-modules)|GNU Affero General Public License v3.0 or later|[AGPL-3.0-or-later](https://spdx.org/licenses/AGPL-3.0-or-later.html#licenseText)|
|[PyMISP](https://github.com/MISP/misp-galaxy)|BSD 2-Clause "Simplified" License|[BSD 2-Clause "Simplified" License](https://spdx.org/licenses/BSD-2-Clause.html)|
|[MISP-Maltego](https://github.com/MISP/misp-maltego)|GNU Affero General Public License v3.0 or later|[AGPL-3.0-or-later](https://spdx.org/licenses/AGPL-3.0-or-later.html#licenseText)|
|[misp-dashboard](https://github.com/MISP/misp-dashboard)|GNU Affero General Public License v3.0 or later|[AGPL-3.0-or-later](https://spdx.org/licenses/AGPL-3.0-or-later.html#licenseText)|
# Contributing and copyright
We welcome contributions. Every contributors collectively own the MISP Project (software, libraries and knowledge base) where they did their respective contribution. The contributors acknowledge the [Developer Certificate of Origin](https://developercertificate.org/).
# Export control
The MISP Project is developed at an international scale and the core developers are located in Europe. This website is hosted in Belgium. Export restriction might apply (as MISP open source software can be classified as [ECCN 5D002 or 5D992](https://www.bis.doc.gov/index.php/documents/new-encryption/1652-cat-5-part-2-quick-reference-guide/file)) to the users depending of their location if they download from the official GitHub repositories. If you are located in a region where downloading from GitHub is restricted, MISP project provides an alternative git repository for each MISP project repository at the following location: [TO BE COMPLETED]().