Главная
Study mode:
on
1
Intro
2
What is SBOM?
3
SBOM Ecosystem: Dedicated to Standardizing SBOMs and Building a Data Foundation a Secure Software Supply Chain
4
Response to the Vulnerability in Log4j: Continuously Enhance Community Governanc Capabilities Centering on Vulnerability Awareness, Locating, and Remediation
5
Poisoning Attacks Bring Huge Risks to the Software Supply Chain
6
Challenges in the Trustworthy Software Supply Chain Still Persist
7
An Overview of Trustworthy Software Supply Chain Solution
8
Security Vulnerability Disclosure Models
9
Early Awareness of Security Vulnerabilities is Unavailable
10
Early Awareness of Critical Vulnerabilities Based on Contrastive Learni
11
Early Detection Technology for Security Defect Reports (MemVul)
12
Proactive Vulnerability Discovery by Scanning Similar Vulnerability Features
13
Correct the Version Information of Software with CVEs
14
CVE Fixing Patch Identification
15
Locate Components with CVEs
16
Package Name Confusion Detection
17
Community Monitoring and Risk Control Technologies
18
Early Detection of High-Risk Vulnerabilities
19
Binary Vulnerability Scanning for Open Source Software
20
Effective Malicious Code Identification
21
Next Step: Software Asset Management
Description:
Explore the critical aspects of software supply chain security and transparency in this SIGSOFT webinar. Delve into the concept of Software Bill of Materials (SBOM) and its role in building a trusted software supply chain (TSSC). Examine recent progress in SBOM generation and consumption, vulnerability management, and supply chain attack prevention. Gain insights into silent vulnerability bug reports and fixes identification, vulnerability detection, and CVE improvement. Learn about future directions for TSSC and the challenges that persist in the field. Benefit from the expertise of Dr. Xin Xia, director of the software engineering application technology lab at Huawei, as he shares his research on intelligent software engineering, mining software repositories, and empirical software engineering. Engage with moderator Dr. Xing Hu, assistant professor at Zhejiang University, specializing in intelligent software engineering and software supply chain management.

From SBOM to Trusted Software Supply Chain - How Far Are We?

Association for Computing Machinery (ACM)
Add to list
0:00 / 0:00