Choosing a tool to track and mitigate open source security vulnerabilities

How to find the best Software Composition Analysis (SCA) for your organization

Choosing a Software Composition Analysis Solution

Continuously tracking your application’s dependencies for vulnerabilities and efficiently addressing them is no simple feat. In addition, this is a problem shared by all, and is not an area most companies would consider their core competency. Therefore, it is a great opportunity for the right set of tools to help tackle this concern.

As mentioned before, the category of tools addressing this concern is currently known as Software Composition Analysis (SCA). Throughout this book, I’ve referred to different capabilities an SCA solution may or may not have, and the implications therein. Those questions were meant to assist you in designing the right process and selecting the right tools to help.

Continue reading Choosing a tool to track and mitigate open source security vulnerabilities.

from All - O'Reilly Media http://ift.tt/2CxvKUu