Cybersecurity

Assessing CBOM standards and tools, developing benchmarking and evaluation strategies for cryptographic inventory management.

Context

A Cryptographic Bill of Materials (CBOM) aims to systematically track and document cryptographic components in IT systems. While various CBOM generation tools and standards exist, their real-world effectiveness, efficiency, and comparability requires further research. This project aims to bridge this gap by establishing unified benchmarks for baseline comparisons and unbiased evaluations.

Context

Nowadays, we built software that includes third-party libraries to speed up the development process. However, these libraries can introduce security vulnerabilities into the software. Therefore, it is essential to detect the third-party libraries in the software to analyze their security implications.