Spring Boot 기반의 오픈소스 소프트웨어 보안 취약점 및 패치 정보 제공 웹 어플리케이션 개발
Spring Boot-based Web Application Development for providing information on Security Vulnerabilities and Patches for Open Source Software
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
As Open Source Software(OSS) recently invigorates, many companies actively use the OSSes in their business software. With such OSS invigoration, our web application is developed in order to provide the safety in using the OSSes, and update the information on the new vulnerabilities and the patches at all times by crawling the web pages of the relevant OSS home pages and the managing organizations of the vulnerabilities. By providing the updated information, our application helps the OSS users and developers to be aware of such security issues, and gives them to work in the safer environment from security risks. In addition, our application can be used as a security platform to greatly contribute to preventing potential security incidents not only for companies but also for individual developers.
Abstract
As Open Source Software(OSS) recently invigorates, many companies actively use the OSSes in their business software. With such OSS invigoration, our web application is developed in order to provide the safety in using the OSSes, and update the information on the new vulnerabilities and the patches at all times by crawling the web pages of the relevant OSS home pages and the managing organizations of the vulnerabilities. By providing the updated information, our application helps the OSS users and developers to be aware of such security issues, and gives them to work in the safer environment from security risks. In addition, our application can be used as a security platform to greatly contribute to preventing potential security incidents not only for companies but also for individual developers.
참고문헌 (11)
- 2019Open Source Security and Risk Analysis, "Synopsys Cybersecurity Research Center", Synopsys, 4~ (2019)
- 2021Open Source Security and Risk Analysis Report, "Synopsys Cybersecurity Research Center", Synopsys, 10~ (2021)
- M. Meike, "Security in Open Source Web Content Management Systems", IEEE Security & Privacy, 7(4), pp.44~51 (2009)
- 정성민, "원전 안전계통의 사이버보안 위협 및 대응", (사)디지털산업정보학회 논문지, 16(1), pp.99~109 (2020), (사)디지털산업정보학회
- 김동진, "국가 DB 기반의 국내외 보안취약점 관리체계 분석", Internet and Information Security, 1(2), pp.130~147 (2010)
- 김민철, "공개 취약점 정보를 활용한 소프트웨어 취약점 위험도 스코어링 시스템", 정보보호학회논문지, 28(6), pp.1449~1461 (2018), 한국정보보호학회[DOI]
- Guido Schryen, "Is Open Source Security a Myth?", Communications of the ACM, 54(5), pp.130~140 (2011)
- 김규형, "줌의 보안 취약점 분석과 보안 업데이트 결과 비교", (사)디지털산업정보학회 논문지, 16(4), pp.55~65 (2020), (사)디지털산업정보학회
- "Open Source Vulnerability Database" (2021)[URL]
- 이철남, "오픈소스 라이센스 분쟁사례의 분석과기업의 대응방안에 관한 고찰", 정보과학회지, 26(7), pp.22~36 (2008)
- 류원옥, "오픈소스 보안취약점관리를 통한 안전한 오픈소스 사용 방안", 2021년도 한국통신학회 하계종합학술발표회 논문집, pp.854~855 (2021)