Critical Software Components

Critical Software Components

In software construction, we usually use software libraries. A classic mistake in projects is to minimize the importance of those libraries as a software item, thus the software behavior can be compromised.

Typical problems:

Unexpected results/behavior

Possible causes:

  • Not considering the library as part of the architecture/design.
  • Not having the right version of the library in a release.
  • Not considering license statements (typical commercial use).
  • Modifying the library without tracking changes (and also combined with licensing issues regarding modifications).

What to do:

  • Check license terms with a specialist and/or apply tools whenever appropriate.
  • Add the component as a configuration item in your configuration management plan and repository.
  • Manage the library like any other component regarding its process cycle (development, V&V, approval, baseline)
  • Trace the right version to the released software.
  • Test it whenever applicable.

Daniel Gutson

Core Detection Lead of Eclypsium Inc.

2 年

This is where the SBOM (Software Bill of Materials) comes to play. They are usually obtained with the SCA tools (Software Composition Analysis). Typical SCA tools check the dependency tree for license compliancy, obsolescence, and vulnerabilities based on the versions. It's really important to have SCA audits automated in the pipelines.

要查看或添加评论,请登录

Alvaro Ruiz de Mendarozqueta的更多文章

  • Back to basics: modularity

    Back to basics: modularity

    Some typical problems in software Difficult to: understand, maintain and modify Long development times David Parnas…

    1 条评论
  • Software Engineering in the Agile Manifesto

    Software Engineering in the Agile Manifesto

    If you are not producing working, running, tested usable software in every single Sprint or iteration, you are not…

    2 条评论
  • Systems theory and emergent design

    Systems theory and emergent design

    Software behavior Software architecture and design determine software behavior. Behavior must satisfy the customer's…

    1 条评论
  • Teoría de sistemas y dise?o que emerge

    Teoría de sistemas y dise?o que emerge

    Comportamiento del software La arquitectura de software y el dise?o determinan su comportamiento. Dicho comportamiento…

  • Educación en las empresas

    Educación en las empresas

    Sociedad del conocimiento En la era de la información, el conocimiento resulta un activo clave a la hora de emprender…

    10 条评论
  • Mejora de procesos de desarrollo de software y la filosofía ágil

    Mejora de procesos de desarrollo de software y la filosofía ágil

    Resumen En Argentina hay desarrollos de alta tecnología que cuentan con cada vez más software para su funcionamiento…

  • Algunas desventajas de los mecanismos de pedidos a sistemas a través de tickets

    Algunas desventajas de los mecanismos de pedidos a sistemas a través de tickets

    Los pedidos a los sistemas de información Durante los últimos a?os la influencia del software y los sistemas en la vida…

    4 条评论

社区洞察

其他会员也浏览了