Developers Need Smarter SCA Tools to Fight Software Supply Chain Attacks

Software composition analysis (SCA) tools render too many false positives. SCA based on code matching will only find components integrated into a software stack without modification. Pattern recognition and intelligent analysis is needed for components that have been modified in irregular ways. The Apona platform claims to utilize intelligent pattern recognition and deep scanning across file, component, and function levels, detecting OSS with near 100% accuracy.

Read All

analysis appsec attacks claims code cybersecurity developers false positives find modification oss platform recognition sast sbom sca security software software composition analysis software supply chain software supply chain attacks supply supply chain supply chain attacks third-party-code tools