Artwork

Contenido proporcionado por HackerNoon. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente HackerNoon o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.
Player FM : aplicación de podcast
¡Desconecta con la aplicación Player FM !

Developers Need Smarter SCA Tools to Fight Software Supply Chain Attacks

3:35
 
Compartir
 

Manage episode 364438095 series 3474671
Contenido proporcionado por HackerNoon. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente HackerNoon o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.

This story was originally published on HackerNoon at: https://hackernoon.com/developers-need-smarter-sca-tools-to-fight-software-supply-chain-attacks.
Software composition analysis (SCA) tools render too many false positives, and aren't smart enough to find modified dependencies. New methods show promise...
Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #cybersecurity, #appsec, #sast, #third-party-code, #oss, #software-supply-chain-attacks, #sbom, #security, and more.
This story was written by: @andrejc. Learn more about this writer by checking @andrejc's about page, and for more stories, please visit hackernoon.com.
Software composition analysis (SCA) tools render too many false positives. SCA based on code matching will only find components integrated into a software stack without modification. Pattern recognition and intelligent analysis is needed for components that have been modified in irregular ways. The Apona platform claims to utilize intelligent pattern recognition and deep scanning across file, component, and function levels, detecting OSS with near 100% accuracy.

  continue reading

283 episodios

Artwork
iconCompartir
 
Manage episode 364438095 series 3474671
Contenido proporcionado por HackerNoon. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente HackerNoon o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.

This story was originally published on HackerNoon at: https://hackernoon.com/developers-need-smarter-sca-tools-to-fight-software-supply-chain-attacks.
Software composition analysis (SCA) tools render too many false positives, and aren't smart enough to find modified dependencies. New methods show promise...
Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #cybersecurity, #appsec, #sast, #third-party-code, #oss, #software-supply-chain-attacks, #sbom, #security, and more.
This story was written by: @andrejc. Learn more about this writer by checking @andrejc's about page, and for more stories, please visit hackernoon.com.
Software composition analysis (SCA) tools render too many false positives. SCA based on code matching will only find components integrated into a software stack without modification. Pattern recognition and intelligent analysis is needed for components that have been modified in irregular ways. The Apona platform claims to utilize intelligent pattern recognition and deep scanning across file, component, and function levels, detecting OSS with near 100% accuracy.

  continue reading

283 episodios

Semua episode

×
 
Loading …

Bienvenido a Player FM!

Player FM está escaneando la web en busca de podcasts de alta calidad para que los disfrutes en este momento. Es la mejor aplicación de podcast y funciona en Android, iPhone y la web. Regístrate para sincronizar suscripciones a través de dispositivos.

 

Guia de referencia rapida

Escucha este programa mientras exploras
Reproducir