Licensing Guide

License Summary

Malware & Monsters is licensed under Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International (CC BY-NC-SA 4.0).

You are free to:

Share — copy and redistribute the material in any medium or format
Adapt — remix, transform, and build upon the material

Under the following terms:

Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made
NonCommercial — You may not use the material for commercial purposes
ShareAlike — If you remix, transform, or build upon the material, you must distribute your contributions under the same license

No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.

What Constitutes Commercial vs Non-Commercial Use

Commercial Use (Requires Separate License)

Clearly Commercial:

Paid cybersecurity training workshops using Malware & Monsters
Commercial training companies offering M&M-based sessions
Consulting services built around M&M methodology
Selling access to M&M sessions or materials
Organizations charging external participants for M&M-based cybersecurity education
Training platforms offering M&M content as part of paid subscription services

Non-Commercial Use (Freely Permitted)

Educational Institutions:

Universities incorporating M&M into degree programs (even with tuition)
Community colleges offering M&M as part of cybersecurity certificates
High schools using M&M for cybersecurity awareness education
Academic researchers studying collaborative cybersecurity education

Internal Corporate Training:

Companies training their own employees using M&M
Organizations using M&M for internal security awareness programs
IT departments running M&M sessions for staff development
Internal lunch-and-learn sessions using M&M materials

Conference and Community Use:

Security conferences including M&M sessions as part of general programming
User groups and meetups running M&M activities
Non-profit organizations using M&M for educational outreach
Community cybersecurity education initiatives

Research and Personal Use:

Academic research involving M&M methodology
Personal learning and skill development
Hobbyist cybersecurity education
Open source contributions to the M&M project

Commercial Licensing Process

Commercial use requires a separate license agreement with Lena Yu.

Step 1: Contact for Licensing

Contact Information:

Email: lena.yu@worldcyber.health

Step 2: License Application

Please include the following information in your initial contact:

Organization Details:

Organization name and type
Primary contact person and role
Business address and registration details

Use Case Information:

Detailed description of intended use
Target audience and participant demographics
Frequency and scale of planned activities
Geographic scope of operations

Commercial Context:

Revenue model and pricing structure
How M&M content will be integrated into offerings
Marketing and promotional plans involving M&M
Timeline for implementation

Step 3: License Agreement

Following initial review, we will:

Direct contact to understand the use case and explore compliance options
Custom license drafting tailored to your specific needs and scale
Agreement finalization with clear terms, fees (if applicable), and usage guidelines
Ongoing support for proper attribution and community contribution opportunities

Gray Areas and Special Cases

Conference Presentations

Generally Permitted: Speaking about M&M at paid conferences where:

Conference fee covers general programming, not specifically M&M content
M&M is part of broader cybersecurity education discussion
No separate monetization of M&M materials

May Require License: Dedicated M&M workshops at conferences where:

Participants pay specifically for M&M content
Workshop has separate fee beyond conference admission
M&M materials are primary value proposition

Corporate Training

Internal Training (Permitted): Companies training their own employees External Training (Requires License): Companies offering M&M training to external clients

Educational Partnerships

Tuition-Based Education (Permitted): Universities and schools using M&M in regular coursework Professional Development (May Require License): Continuing education programs targeting working professionals

Attribution Requirements

When using Malware & Monsters materials, you must:

Credit the creators: “Malware & Monsters by Lena Yu, Klaus Agnoletti, and Glen Sorensen”
Link to the source: Include link to https://malwareandmonsters.com
Indicate modifications: If you’ve adapted or modified materials, clearly state what changes were made
Share license: Make the CC BY-NC-SA 4.0 license terms available to your audience

Community Contributions

We encourage community contributions while respecting licensing terms:

Contribute back: Share improvements and new content with the community
Maintain compatibility: Ensure contributions are compatible with CC BY-NC-SA 4.0
Collaborative development: Join community development efforts and discussions

Questions and Support

Licensing Questions

For licensing questions or commercial use inquiries:

Email: lena.yu@worldcyber.health

General Support

For general questions about using M&M materials:

Website: https://malwareandmonsters.com/contact
Community: Join community discussions and development efforts

Legal Text

For the complete legal text of the CC BY-NC-SA 4.0 license, visit: https://creativecommons.org/licenses/by-nc-sa/4.0/