Challenges of Producing Software Bill of Materials for Java-Reference-Cited by-同舟云学术

Challenges of Producing Software Bill of Materials for Java

Published:2023-11 Issue:6 Volume:21 Page:12-23
ISSN:1540-7993
Container-title:IEEE Security & Privacy
language:
Short-container-title:IEEE Secur. Privacy

Author:

Balliu Musard¹^ORCID,Baudry Benoit¹^ORCID,Bobadilla Sofia¹^ORCID,Ekstedt Mathias¹^ORCID,Monperrus Martin¹^ORCID,Ron Javier¹^ORCID,Sharma Aman¹^ORCID,Skoglund Gabriel¹^ORCID,Soto-Valero César¹^ORCID,Wittlinger Martin¹^ORCID

Affiliation:

1. KTH Royal Institute of Technology, Stockholm, Sweden

Publisher

Institute of Electrical and Electronics Engineers (IEEE)

Subject

Law,Electrical and Electronic Engineering,Computer Networks and Communications

Link

http://xplorestaging.ieee.org/ielx7/8013/10315765/10235318.pdf?arnumber=10235318

Reference15 articles.

1. An Empirical Study on Software Bill of Materials: Where We Stand and the Road Ahead

2. A comprehensive study of bloated dependencies in the Maven ecosystem

3. What are weak links in the npm supply chain?

4. Readiness model for DevOps implementation in software organizations

Cited by 6 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Accuracy Evaluation of SBOM Tools for Web Applications and System-Level Software;Proceedings of the 19th International Conference on Availability, Reliability and Security;2024-07-30

2. Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

3. Osmy: A Tool for Periodic Software Vulnerability Assessment and File Integrity Verification using SPDX Documents;2024 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER);2024-03-12

4. On the Deployment Control and Runtime Monitoring of Containers Based on Consumer Side SBOMs;2024 IEEE 21st Consumer Communications & Networking Conference (CCNC);2024-01-06

5. Software Bill of Materials in Java;Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses;2023-11-26