From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Software composition

Software composition

From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Start my 1-month free trial Buy for my team

Software composition

“

- In this lesson, we're going to discuss software composition analysis. Software composition analysis describes a process by which software can be analyzed for open source components because these open source components could contain vulnerabilities in their source code, and those vulnerabilities will then be assumed by our applications when we use those components and our own web apps. If you or a vendor are going to build a piece of software that's going to be publicly accessible like a web app, you need to pay special attention to the risk associated with those applications. There's almost no applications these days that are written completely by your own developers or vendors. Instead, most developers are going to rely on third-party dependencies like library packages, JavaScript scripts, and CSS files. The problem with that is that even if your code is written extremely well from a security standpoint, if those third-party dependencies have a security flaw in them, you just…

Contents