¡Desconecta con la aplicación Player FM !
Developers Need Smarter SCA Tools to Fight Software Supply Chain Attacks
Manage episode 364438095 series 3474671
This story was originally published on HackerNoon at: https://hackernoon.com/developers-need-smarter-sca-tools-to-fight-software-supply-chain-attacks.
Software composition analysis (SCA) tools render too many false positives, and aren't smart enough to find modified dependencies. New methods show promise...
Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #cybersecurity, #appsec, #sast, #third-party-code, #oss, #software-supply-chain-attacks, #sbom, #security, and more.
This story was written by: @andrejc. Learn more about this writer by checking @andrejc's about page, and for more stories, please visit hackernoon.com.
Software composition analysis (SCA) tools render too many false positives. SCA based on code matching will only find components integrated into a software stack without modification. Pattern recognition and intelligent analysis is needed for components that have been modified in irregular ways. The Apona platform claims to utilize intelligent pattern recognition and deep scanning across file, component, and function levels, detecting OSS with near 100% accuracy.
283 episodios
Manage episode 364438095 series 3474671
This story was originally published on HackerNoon at: https://hackernoon.com/developers-need-smarter-sca-tools-to-fight-software-supply-chain-attacks.
Software composition analysis (SCA) tools render too many false positives, and aren't smart enough to find modified dependencies. New methods show promise...
Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #cybersecurity, #appsec, #sast, #third-party-code, #oss, #software-supply-chain-attacks, #sbom, #security, and more.
This story was written by: @andrejc. Learn more about this writer by checking @andrejc's about page, and for more stories, please visit hackernoon.com.
Software composition analysis (SCA) tools render too many false positives. SCA based on code matching will only find components integrated into a software stack without modification. Pattern recognition and intelligent analysis is needed for components that have been modified in irregular ways. The Apona platform claims to utilize intelligent pattern recognition and deep scanning across file, component, and function levels, detecting OSS with near 100% accuracy.
283 episodios
Semua episode
×Bienvenido a Player FM!
Player FM está escaneando la web en busca de podcasts de alta calidad para que los disfrutes en este momento. Es la mejor aplicación de podcast y funciona en Android, iPhone y la web. Regístrate para sincronizar suscripciones a través de dispositivos.