Licensing Guide

License Summary

Malware & Monsters is licensed under Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International (CC BY-NC-SA 4.0).

You are free to: - Share — copy and redistribute the material in any medium or format - Adapt — remix, transform, and build upon the material

Under the following terms: - Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made - NonCommercial — You may not use the material for commercial purposes - ShareAlike — If you remix, transform, or build upon the material, you must distribute your contributions under the same license

No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.

What Constitutes Commercial vs Non-Commercial Use

Commercial Use (Requires Separate License)

Clearly Commercial: - Paid cybersecurity training workshops using Malware & Monsters - Commercial training companies offering M&M-based sessions - Consulting services built around M&M methodology - Selling access to M&M sessions or materials - Organizations charging external participants for M&M-based cybersecurity education - Training platforms offering M&M content as part of paid subscription services

Non-Commercial Use (Freely Permitted)

Educational Institutions: - Universities incorporating M&M into degree programs (even with tuition) - Community colleges offering M&M as part of cybersecurity certificates - High schools using M&M for cybersecurity awareness education - Academic researchers studying collaborative cybersecurity education

Internal Corporate Training: - Companies training their own employees using M&M - Organizations using M&M for internal security awareness programs - IT departments running M&M sessions for staff development - Internal lunch-and-learn sessions using M&M materials

Conference and Community Use: - Security conferences including M&M sessions as part of general programming - User groups and meetups running M&M activities - Non-profit organizations using M&M for educational outreach - Community cybersecurity education initiatives

Research and Personal Use: - Academic research involving M&M methodology - Personal learning and skill development - Hobbyist cybersecurity education - Open source contributions to the M&M project

Commercial Licensing Process

Commercial use requires a separate license agreement with Lena Yu.

Step 1: Contact for Licensing

Contact Information: - Email: lena.yu@worldcyber.health - Subject Line: “Malware & Monsters Commercial License Request”

Step 2: License Application

Please include the following information in your initial contact:

Organization Details: - Organization name and type - Primary contact person and role - Business address and registration details

Use Case Information: - Detailed description of intended use - Target audience and participant demographics
- Frequency and scale of planned activities - Geographic scope of operations

Commercial Context: - Revenue model and pricing structure - How M&M content will be integrated into offerings - Marketing and promotional plans involving M&M - Timeline for implementation

Step 3: License Agreement

Following initial review, we will:

Direct contact to understand the use case and explore compliance options
Custom license drafting tailored to your specific needs and scale
Agreement finalization with clear terms, fees (if applicable), and usage guidelines
Ongoing support for proper attribution and community contribution opportunities

Gray Areas and Special Cases

Conference Presentations

Generally Permitted: Speaking about M&M at paid conferences where: - Conference fee covers general programming, not specifically M&M content - M&M is part of broader cybersecurity education discussion - No separate monetization of M&M materials

May Require License: Dedicated M&M workshops at conferences where: - Participants pay specifically for M&M content - Workshop has separate fee beyond conference admission - M&M materials are primary value proposition

Corporate Training

Internal Training (Permitted): Companies training their own employees External Training (Requires License): Companies offering M&M training to external clients

Educational Partnerships

Tuition-Based Education (Permitted): Universities and schools using M&M in regular coursework Professional Development (May Require License): Continuing education programs targeting working professionals

Attribution Requirements

When using Malware & Monsters materials, you must:

Credit the creators: “Malware & Monsters by Lena Yu, Klaus Agnoletti, and Glen Sorensen”
Link to the source: Include link to https://malwareandmonsters.com
Indicate modifications: If you’ve adapted or modified materials, clearly state what changes were made
Share license: Make the CC BY-NC-SA 4.0 license terms available to your audience

Community Contributions

We encourage community contributions while respecting licensing terms:

Contribute back: Share improvements and new content with the community
Maintain compatibility: Ensure contributions are compatible with CC BY-NC-SA 4.0
Collaborative development: Join community development efforts and discussions

Questions and Support

Licensing Questions

For licensing questions or commercial use inquiries: - Email: lena.yu@worldcyber.health - Subject: “Malware & Monsters Licensing Question”

General Support

For general questions about using M&M materials: - Website: https://malwareandmonsters.com/contact - Community: Join community discussions and development efforts

Legal Text

For the complete legal text of the CC BY-NC-SA 4.0 license, visit: https://creativecommons.org/licenses/by-nc-sa/4.0/