JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs

This repository contains the artifact for JBomAudit, a tool designed to evaluate the completeness and accuracy of Java SBOMs (Software Bill of Materials). The tool analyzes SBOMs alongside their corresponding JAR files to detect discrepancies, categorized as either missing dependencies (M1, M2, M3) or incorrect dependencies (N1, N2, N3). This artifact replicates the core results and analysis presented in the associated research paper: "JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs".

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-02-28
DOI
https://doi.org/10.5281/zenodo.14193846
Primary Topic
Software Engineering Research
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs

Zenodo (CERN European Organization for Nuclear Research)
Software Engineering Research
article

JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs

article en

Abstract

This repository contains the artifact for JBomAudit, a tool designed to evaluate the completeness and accuracy of Java SBOMs (Software Bill of Materials). The tool analyzes SBOMs alongside their corresponding JAR files to detect discrepancies, categorized as either missing dependencies (M1, M2, M3) or incorrect dependencies (N1, N2, N3). This artifact replicates the core results and analysis presented in the associated research paper: "JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs".

Zenodo (CERN European Organization for Nuclear Research)
Openalex Percentile: Top 42%
Software Engineering Research
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs · Zenodo (CERN European Organization for Nuclear Research) (2025) | TGRS Research Map | TGRS