As software capabilities increase and are delivered more frequently, further external software components (e.g., services, frameworks, platforms, or libraries) are incorporated. Thus, organizations and IT increasingly depend on more complex and dynamic Software Supply Chains (SSCs). Yet, the entire set of components involved are often opaque for end users, businesses, and even developers. Software Bill of Materials (SBOM) formats (SPDX, CycloneDX) provide essential information regarding components, yet their voluminous text and 2D tool visualization limitations obscure the underlying models and SSC. This paper contributes an immersive Virtual Reality (VR) solution concept VR-SBOM towards holistic contextualized multi-layout visualization of SSCs with heterogeneous SBOMs. Our prototype implementation demonstrates its feasibility, while a scenarios-based case study exhibits its potential and scalability.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

VR-SBOM: Visualization of Software Bill of Materials and Software Supply Chains in Virtual Reality

  • Roy Oberhauser

摘要

As software capabilities increase and are delivered more frequently, further external software components (e.g., services, frameworks, platforms, or libraries) are incorporated. Thus, organizations and IT increasingly depend on more complex and dynamic Software Supply Chains (SSCs). Yet, the entire set of components involved are often opaque for end users, businesses, and even developers. Software Bill of Materials (SBOM) formats (SPDX, CycloneDX) provide essential information regarding components, yet their voluminous text and 2D tool visualization limitations obscure the underlying models and SSC. This paper contributes an immersive Virtual Reality (VR) solution concept VR-SBOM towards holistic contextualized multi-layout visualization of SSCs with heterogeneous SBOMs. Our prototype implementation demonstrates its feasibility, while a scenarios-based case study exhibits its potential and scalability.