There is a study published as a PDF under Creative Commons Attribution-ShareAlike 3.0.
Can I create a commercial (proprietary) web application that uses data from the study and makes computations as proposed by the study, and have users pay for the usage of this web application? So basically I would apply the data in the study to the specific case of my web application user, and I would do the calculations on input data entered by my user, with my own implementation, but using the data in the study.
What implication would this have on the license of my application? Would that then be a derivative work?
I'm talking about the BSIMM study. They asked a large number of companies about their software security practices, and gathered the results broken down by industry for example. They also identified 100+ activities that are somewhat common to ensure secure software, and proposed a way to assess yourself against this empirical best practice. What I had in mind is basically just a calculator for a given company to assess itself in a nicely presented webapp, based on the data in the study (assessing how that specific company fares compared to the ones in the study - this is the very purpose of the study, they even propose methods to do the comparison).