MEM-SBOM generates runtime SBOMs for Python applications by recovering modules, versions, and dependency graphs from volatile memory via Volatility 3 plugins, achieving 100% extraction accuracy on 51 apps.
A landscape study of open source and proprietary tools for software bill of materials (sbom)
4 Pith papers cite this work, alongside 5 external citations. Polarity classification is still indexing.
4
Pith papers citing it
5
external citations · external index
citation-role summary
background 1
citation-polarity summary
roles
background 1polarities
background 1representative citing papers
AgentRiskBOM is a new additive security BOM schema for agentic AI that adds fields for autonomy, tool permissions, memory, credentials, and audit signals, showing 100% risk-category visibility on 13 agents versus under 21% for prior BOMs.
StarCoder2-15B matches or beats CodeLlama-34B on code tasks despite being smaller, and StarCoder2-3B outperforms prior 15B models, with open weights and exact training data identifiers released.
Hidden dependencies and component variants in SBOMs cause inconsistent vulnerability reporting and VEX handling across scanners.
citing papers explorer
-
What You See Is Not What You Execute: Memory-Based Runtime SBOM Generation for Supply Chain Security
MEM-SBOM generates runtime SBOMs for Python applications by recovering modules, versions, and dependency graphs from volatile memory via Volatility 3 plugins, achieving 100% extraction accuracy on 51 apps.
-
AgentRiskBOM: A Risk-Scoping Security Bill of Materials for Agentic AI Systems
AgentRiskBOM is a new additive security BOM schema for agentic AI that adds fields for autonomy, tool permissions, memory, credentials, and audit signals, showing 100% risk-category visibility on 13 agents versus under 21% for prior BOMs.
-
StarCoder 2 and The Stack v2: The Next Generation
StarCoder2-15B matches or beats CodeLlama-34B on code tasks despite being smaller, and StarCoder2-3B outperforms prior 15B models, with open weights and exact training data identifiers released.
-
Hidden Dependencies and Component Variants in SBOM-Based Software Composition Analysis
Hidden dependencies and component variants in SBOMs cause inconsistent vulnerability reporting and VEX handling across scanners.