We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

Building the world’s first free open source database of FOSS and their vulnerabilities.

2
 Zitieren
 Teilen
 Herunterladen
 Bestellen
Logo von FOSDEM VZWFOSDEM VZW
 Sandbhor, Shivam

Formale Metadaten

Titel
Building the world’s first free open source database of FOSS and their vulnerabilities.
Untertitel
Learn why and how we are building VulnerableCode, a free and open source database of FOSS components and their vulnerabilities.
Serientitel
Anzahl der Teile
637
Autor
Lizenz
CC-Namensnennung 2.0 Belgien:
Sie dürfen das Werk bzw. den Inhalt zu jedem legalen Zweck nutzen, verändern und in unveränderter oder veränderter Form vervielfältigen, verbreiten und öffentlich zugänglich machen, sofern Sie den Namen des Autors/Rechteinhabers in der von ihm festgelegten Weise nennen.
Identifikatoren
Herausgeber
Erscheinungsjahr
Sprache

Inhaltliche Metadaten

Fachgebiet
Genre
Abstract
VulnerableCode is a free and open source database of vulnerabilities and the FOSS packages they impact. It is made by the FOSS community to improve the security of the open source software ecosystem. It’s design solves various pre-existing problems like licensing, data complexity and usability. Using software with known vulnerabilities is one of OWASP’s Top 10 security vulnerabilities . This is increasingly becoming more important as more and more software is built on top of existing free and open source software. From the perspective of software composition analysis, it then becomes increasingly important to know about vulnerable components being used. Naturally a database of mappings of packages and their vulnerabilities is required. Below are some of the problems with existing solutions and how VulnerableCode solves these.