Understanding Similarities and Differences Between Software Composition Analysis Tools
Software composition analysis (SCA) plays a key role in ensuring supply chain security by helping identify known security vulnerabilities in open source libraries. We review several popular SCA tool, comparing their key functionalities based on a set of objective criteria.
Authors
- David Starobinski (ORCID: https://orcid.org/0000-0002-8071-3865)
- Şevval Şimşek (ORCID: https://orcid.org/0000-0002-4909-4197)
- Pranet Sharma (ORCID: https://orcid.org/0009-0003-6373-7923)
- Zhenpeng Shi (ORCID: https://orcid.org/0000-0002-3524-4182)
- David Sastre Medina
Institutions
- Universidad Complutense de Madrid (ES)
Publication Details
- Journal
- IEEE Security & Privacy
- Published
- 2024-08-26
- DOI
- https://doi.org/10.1109/msec.2024.3410957
- Citations
- 1
- Primary Topic
- Software Engineering Research
- Type
- article
- Field-Weighted Citation Impact
- 0.78