Solving real world security problems hacking and protection : enhancement of software components analysis

Abstract

In recent years, the open-source components have become the most critical part of software development. Most modern applications are integrated with open source components and assembled with original code to build desired functionality. To ensure the open-source components meet the security standards and the organizations are compliant with the required open source licenses, software component analysis is playing an essential role in secure software development.

The purpose of this research was to evaluate the SCA analyzer developed by Scantist by comparing the open-source SCA analyzer owned by Snyk. It would help the Scantist researchers to improve the features and strengthen the market competition ability.

During this project, two application issues of the Scantist SCA analyzer were identified. A new version of Scantist had been developed after reporting the analysis results and application issues to Scantist researchers. The new Scantist SCA analyzer had implemented the powerful features which improved the accuracy of the analysis and increased reliability.