Osmy: A Tool for Periodic Software Vulnerability Assessment and File Integrity Verification using SPDX Documents

Kishimoto, Rio; Kanda, Tetsuya; Manabe, Yuki et al.

Proceedings - 2024 IEEE International Conference on Software Analysis, Evolution and Reengineering, SANER 2024, 2024, 445-449

アクセス数:296件（2025-07-07 13:08 集計）

固定URL: https://hdl.handle.net/11094/98115

閲覧可能ファイル 

ファイル フォーマット 利用条件 サイズ 閲覧回数 利用開始日 説明 information
Proc-IEEEIntConfSoftwAnal,EvolReengineering,SANER_445 pdf なし 496 KB 71 2024.09.20  

論文情報

ファイル出力 EndNote Basic出力 Mendeley出力

タイトル
Osmy: A Tool for Periodic Software Vulnerability Assessment and File Integrity Verification using SPDX Documents
著者
著者名
Kishimoto, Rio
NRID
1000090780726 1000090780726
researchmap permalink
t-kanda t-kanda
Scopus Author ID
55853578000 55853578000
著者名
Kanda, Tetsuya
NRID
1000020625339 1000020625339
著者名
Manabe, Yuki
NRID
1000020168438 1000020168438
Scopus Author ID
7601540520 7601540520
著者名
Inoue, Katsuro
NRID
1000070452414 1000070452414
ORCID
0000-0002-8278-8975 0000-0002-8278-8975
researchmap permalink
yoshiki.higo yoshiki.higo
Scopus Author ID
7004831134 7004831134
著者名
Higo, Yoshiki
キーワード等
SBOM
SPDX
vulnerability
内容
Kishimoto R., Kanda T., Manabe Y., et al. Osmy: A Tool for Periodic Software Vulnerability Assessment and File Integrity Verification using SPDX Documents. Proceedings - 2024 IEEE International Conference on Software Analysis, Evolution and Reengineering, SANER 2024 , 445 (2024); https://doi.org/10.1109/SANER60148.2024.00052.
抄録
Libraries have become integral to modern software development, yet their management often falls short, resulting in issues such as delayed responses to vulnerabilities. To address these issues, the use of a Software Bill of Materials (SBOM) is recommended. Despite the recommendation, there is a lack of tools supporting software management using SBOM. In this paper, we present 'Osmy', a tool designed to facilitate effective software management using SBOM in the SPDX format-one of the major SBOM formats. Osmy is designed to simplify and streamline SBOM-based software management for end users. It automates vulnerability assessment and file integrity verification, operating periodically to ensure continuous protection. Users receive timely notification of any identified issues, ensuring a proactive approach to software security. Osmy is available at https://github.com/higolab/Osmy.
会議情報
会議名
IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)
回次
2024
主催機関
IEEE
開催期間
March 12th to March 15th, 2024
開催会場
Santa’s Hotel Santa Claus
開催地
Rovaniemi
開催国
フィンランド
出版者
Institute of Electrical and Electronics Engineers Inc.
収録物名
Proceedings - 2024 IEEE International Conference on Software Analysis, Evolution and Reengineering, SANER 2024
ページ
445-449
刊行年月
2024-07-16
言語
英語
ハンドルURL
https://hdl.handle.net/11094/98115
PISSN
15345351
eISSN
26407574
関連情報 (isVersionOf)
DOI (出版社版)
https://doi.org/10.1109/SANER60148.2024.00052
アクセス権
open access
権利情報
© 2024 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
出版タイプ
Accepted Manuscript
カテゴリ
会議発表論文 Conference Paper