The vast majority of today’s applications are made up of open source components. The 2021 “Open Source Security and Risk Analysis” (OSSRA) report, conducted by the Synopsys Cybersecurity Research Center (CyRC), found that 75% of the 1,500+ codebases analyzed were composed of open source.
Posted in Mergers & Acquisitions, Open Source Security, Software Composition Analysis (SCA)
Identifying security vulnerabilities is only half the battle. To remediate and prioritize them, you need Black Duck Security Advisories.
Posted in Software Composition Analysis (SCA)
Stay on top of open source vulnerabilities and license obligations with discovery capabilities from Black Duck.
Posted in Open Source Security, Software Composition Analysis (SCA)
Open source risk goes beyond application security. Legal, operational, and supply chain implications demand a capable solution like Black Duck SCA.
Posted in Software Composition Analysis (SCA)
The rise of open source software is not without risks for today’s applications. Use a software composition analysis tool to mitigate these risks.
Posted in Software Composition Analysis (SCA)
Open source software is now used in nearly every organization, which makes it critical to know your code. Learn how an SCA tool can help you.
Posted in Software Composition Analysis (SCA)
Today’s release of Black Duck adds vulnerability impact analysis, which indicates whether your application executes vulnerable code. Let’s look at how this addition further augments your prioritization efforts.
Posted in Application Security, Software Composition Analysis (SCA)
Get started with the Dockerized Black Duck installation. This post outlines workplace specifications, tools, and steps for installing Black Duck.
Posted in Software Composition Analysis (SCA)
Open source license noncompliance can have severe implications. Here are four advanced license compliance features that help protect your proprietary code.
Posted in Software Composition Analysis (SCA)
The NVD is a good source for open source vulnerability data. But with an average 27-day reporting delay, it shouldn’t be your only source of information.
Posted in Open Source Security, Software Composition Analysis (SCA)
