Challenges of Producing Software Bill Of Materials for Java
arXiv:2303.11102 · doi:10.1109/MSEC.2023.3302956
Abstract
Software bills of materials (SBOM) promise to become the backbone of software supply chain hardening. We deep-dive into 6 tools and the accuracy of the SBOMs they produce for complex open-source Java projects. Our novel insights reveal some hard challenges for the accurate production and usage of SBOMs.