Challenges of Producing Software Bill of Materials for Java 2023 (English)In: IEEE Security and Privacy, ISSN 1540-7993, E-ISSN 1558-4046, Vol. 21, no 6, p. 12-23Article in journal (Refereed) Published

Abstract [en]

Software bills of materials (SBOMs) promise to become the backbone of software supply chain hardening. We deep-dive into six tools and the SBOMs they produce for complex open source Java projects, revealing challenges regarding the accurate production and usage of SBOMs.

Place, publisher, year, edition, pages

Institute of Electrical and Electronics Engineers (IEEE) , 2023. Vol. 21, no 6, p. 12-23

Keywords [en]

Java, Software, Production, Supply chain management, Standards, Bills of materials, Software reliability

National Category

Software Engineering

Identifiers

URN: urn:nbn:se:kth:diva-343925DOI: 10.1109/MSEC.2023.3302956ISI: 001107292700005Scopus ID: 2-s2.0-85170551424OAI: oai:DiVA.org:kth-343925DiVA, id: diva2:1842523

Funder

Swedish Foundation for Strategic Research, CHAINS

Note

QC 20240314

Available from: 2024-03-05 Created: 2024-03-05 Last updated: 2024-03-14Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Balliu, MusardBaudry, BenoitBobadilla, SofiaEkstedt, MathiasMonperrus, MartinRon Arteaga, JavierSharma, AmanSkoglund, GabrielSoto Valero, CésarWittlinger, Martin

Search in DiVA

By author/editor

Balliu, MusardBaudry, BenoitBobadilla, SofiaEkstedt, MathiasMonperrus, MartinRon Arteaga, JavierSharma, AmanSkoglund, GabrielSoto Valero, CésarWittlinger, Martin

By organisation

Theoretical Computer Science, TCSSoftware and Computer systems, SCSNetwork and Systems Engineering

In the same journal

IEEE Security and Privacy

On the subject

Software Engineering

Search outside of DiVA

GoogleGoogle ScholarTotal: 315 hits