FASTEN: Fine-Grained Analysis of Software Ecosystems as Networks
summary
FASTEN builds very large networks representing software ecosystems and analyzes them at the method level rather than the package level to reduce false positives in vulnerability reports. It links vulnerabilities to specific methods so developers are alerted when their code calls vulnerable methods, and plans to integrate this fine-grained vulnerability information into package managers like Maven and PyPI.
AI-written summary · about
related talks
52mBuilding Community-Driven Security Analysis for Your .NET Software Supply Chain
49mOpen-source vulnerability management? Use the source, Luke!
51mPractical Approach to Automate the Discovery & Eradication of Open-Source Software Vulnerabilities
40mSoftware Composition Analysis with Free Tools
44mSecuring Open Source Software - End-to-End, at Massive Scale, Together
21mState of Attack Surface Elimination in a World Plagued by Vulnerable Software
24mDependency Track Fortifying The Supply Chain
44mCome Join the CAFSA - Continuous Automated Firmware Security Analysis