Challenges of Producing Software Bill Of Materials for Java

Musard Balliu; Benoit Baudry; Sofia Bobadilla; Mathias Ekstedt; Martin Monperrus; Javier Ron; Aman Sharma; Gabriel Skoglund; César Soto-Valero; Martin Wittlinger

doi:10.1109/MSEC.2023.3302956

Challenges of Producing Software Bill Of Materials for Java

Software Engineering 2023-11-28 v2 Cryptography and Security

Authors: Musard Balliu , Benoit Baudry , Sofia Bobadilla , Mathias Ekstedt , Martin Monperrus , Javier Ron , Aman Sharma , Gabriel Skoglund , César Soto-Valero , Martin Wittlinger

View on arXiv ↗ PDF ↗ DOI ↗

Abstract

Software bills of materials (SBOM) promise to become the backbone of software supply chain hardening. We deep-dive into 6 tools and the accuracy of the SBOMs they produce for complex open-source Java projects. Our novel insights reveal some hard challenges for the accurate production and usage of SBOMs.

Cite

@article{arxiv.2303.11102,
  title  = {Challenges of Producing Software Bill Of Materials for Java},
  author = {Musard Balliu and Benoit Baudry and Sofia Bobadilla and Mathias Ekstedt and Martin Monperrus and Javier Ron and Aman Sharma and Gabriel Skoglund and César Soto-Valero and Martin Wittlinger},
  journal= {arXiv preprint arXiv:2303.11102},
  year   = {2023}
}

Related papers

View all related →