Imagen de Portada

A Large Scale Empirical Analysis on the Adherence Gap between Standards and Tools in SBOM

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Wang, Chengjie, Wu, Jingzheng, Lyu, Hao, Ling, Xiang, Luo, Tianyue, Wu, Yanjun, Zhao, Chen
Formato:	Preprint
Publicado:	2026
Materias:	Software Engineering
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versions
por: Wang, Chengjie, et al.
Publicado: (2026)

When Large Language Models Confront Repository-Level Automatic Program Repair: How Well They Done?
por: Chen, Yuxiao, et al.
Publicado: (2024)

The Seeds of the FUTURE Sprout from History: Fuzzing for Unveiling Vulnerabilities in Prospective Deep-Learning Libraries
por: Li, Zhiyuan, et al.
Publicado: (2024)

Version-level Third-Party Library Detection in Android Applications via Class Structural Similarity
por: Zhou, Bolin, et al.
Publicado: (2025)

The State of the SBOM Tool Ecosystems: A Comparative Analysis of SPDX and CycloneDX
por: Bangash, Abdul Ali, et al.
Publicado: (2025)

SBOM Generation Tools in the Python Ecosystem: an In-Detail Analysis
por: Cofano, Serena, et al.
Publicado: (2024)

A Dataset of Software Bill of Materials for Evaluating SBOM Consumption Tools
por: Kishimoto, Rio, et al.
Publicado: (2025)

A Tool for Benchmarking Large Language Models' Robustness in Assessing the Realism of Driving Scenarios
por: Wu, Jiahui, et al.
Publicado: (2025)

Feature Slice Matching for Precise Bug Detection
por: Ma, Ke, et al.
Publicado: (2025)

A Landscape Study of Open Source and Proprietary Tools for Software Bill of Materials (SBOM)
por: Mirakhorli, Mehdi, et al.
Publicado: (2024)

UniBOM -- A Unified SBOM Analysis and Visualisation Tool for IoT Systems and Beyond
por: Safronov, Vadim, et al.
Publicado: (2025)

SBOM Challenges for Developers: From Analysis of Stack Overflow Questions
por: Otoda, Wataru, et al.
Publicado: (2025)

zkSBOM: Privacy-Preserving SBOM Sharing with Zero-Knowledge Sets
por: Sorger, Tom, et al.
Publicado: (2026)

VeriSBOM: Secure and Verifiable SBOM Sharing Via Zero-Knowledge Proofs
por: Castiglione, Gianpietro, et al.
Publicado: (2026)

Mind the Gap: A Decade-Scale Empirical Study of Multi-Stakeholder Dynamics in VR Ecosystem
por: Lu, Yijun, et al.
Publicado: (2025)

Trust in Software Supply Chains: Blockchain-Enabled SBOM and the AIBOM Future
por: Xia, Boming, et al.
Publicado: (2023)

Understanding LLM-Centric Challenges for Deep Learning Frameworks: An Empirical Analysis
por: Mu, Yanzhou, et al.
Publicado: (2025)

Hidden Dependencies and Component Variants in SBOM-Based Software Composition Analysis
por: Rasheed, Shawn, et al.
Publicado: (2026)

Automating SBOM Generation with Zero-Shot Semantic Similarity
por: Pereira, Devin, et al.
Publicado: (2024)

A Large-Scale Empirical Study of AI-Generated Code in Real-World Repositories
por: Mao, Tianhao, et al.
Publicado: (2026)

Reinforcement Learning for Testing Interdependent Requirements in Autonomous Vehicles: An Empirical Study
por: Wu, Jiahui, et al.
Publicado: (2025)

Reality Bites: Assessing the Realism of Driving Scenarios with Large Language Models
por: Wu, Jiahui, et al.
Publicado: (2024)

An Empirical Study of Static Analysis Tools for Secure Code Review
por: Charoenwet, Wachiraphan, et al.
Publicado: (2024)

Fixturize: Bridging the Fixture Gap in Test Generation
por: Wang, Chengyi, et al.
Publicado: (2026)

What to Retrieve for Effective Retrieval-Augmented Code Generation? An Empirical Study and Beyond
por: Gu, Wenchao, et al.
Publicado: (2025)

An Empirical Study of GenAI Adoption in Open-Source Game Development: Tools, Tasks, and Developer Challenges
por: Chen, Xiang Echo, et al.
Publicado: (2025)

Debt Behind the AI Boom: A Large-Scale Empirical Study of AI-Generated Code in the Wild
por: Liu, Yue, et al.
Publicado: (2026)

Large-Scale Empirical Analysis of Continuous Fuzzing: Insights from 1 Million Fuzzing Sessions
por: Shirai, Tatsuya, et al.
Publicado: (2025)

ComplexMCP: Evaluation of LLM Agents in Dynamic, Interdependent, and Large-Scale Tool Sandbox
por: Li, Yuanyang, et al.
Publicado: (2026)

ToolRosella: Translating Code Repositories into Standardized Tools for Scientific Agents
por: Di, Shimin, et al.
Publicado: (2026)

A Practical Solution to Systematically Monitor Inconsistencies in SBOM-based Vulnerability Scanners
por: Rosso, Martin, et al.
Publicado: (2025)

SBOMproof: Beyond Alleged SBOM Compliance for Supply Chain Security of Container Images
por: Bufalino, Jacopo, et al.
Publicado: (2025)

Oops!... I did it again. Conclusion (In-)Stability in Quantitative Empirical Software Engineering: A Large-Scale Analysis
por: Hoess, Nicole, et al.
Publicado: (2025)

Ensembling Large Language Models for Code Vulnerability Detection: An Empirical Evaluation
por: Sun, Zhihong, et al.
Publicado: (2025)

VDGraph: A Graph-Theoretic Approach to Unlock Insights from SBOM and SCA Data
por: Xia, Howell, et al.
Publicado: (2025)

SBOM.EXE: Countering Dynamic Code Injection based on Software Bill of Materials in Java
por: Sharma, Aman, et al.
Publicado: (2024)

Demystifying the Evolution of Neural Networks with BOM Analysis: Insights from a Large-Scale Study of 55,997 GitHub Repositories
por: Ren, Xiaoning, et al.
Publicado: (2025)

Can We Recycle Our Old Models? An Empirical Evaluation of Model Selection Mechanisms for AIOps Solutions
por: Lyu, Yingzhe, et al.
Publicado: (2025)

Single-Language Evidence Is Insufficient for Automated Logging: A Multilingual Benchmark and Empirical Study with LLMs
por: Zhong, Renyi, et al.
Publicado: (2026)

DCE-LLM: Dead Code Elimination with Large Language Models
por: Chen, Minyu, et al.
Publicado: (2025)