Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Large-Scale Software Composition Analysis: Uncovering Vulnerable Dependencies in 600 Apps

OWASP Foundation via YouTube

Start learning Write review
CodeSignal Ad

Learn Generative AI, Prompt Engineering, and LLMs for Free

Learn More → Coursera Ad

Learn AI, Data Science & Business — Earn Certificates That Get You Hired

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
The course describes a decentralized Software Composition Analysis exercise using OWASP Dependency-Check to identify vulnerable dependencies across hundreds of vendor-managed applications. It covers process design, automation, monitoring, tool evaluation, and vendor interaction.

Syllabus

Intro
Possible Challenges with Outsourced App Development
Considerations for Centralized Vulnerability Management Tools
People, Process Technology
Evaluation of SCA Tools
SCA Tool Success Factors
SCA Tool Operational Architecture (3rd iteration)
SCA Tool Operational Architecture (4th iteration, WIP)
SCA Tool Evaluation Comparison (Revised)
False Positive from overly broad NVD CPE
Suppression Method
Scanning base products
Vendor's Challenge of non-exploitability

Taught by

OWASP Foundation

Reviews

Start your review of Large-Scale Software Composition Analysis: Uncovering Vulnerable Dependencies in 600 Apps

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.