VR-SBOM: Visualization of Software Bill of Materials and Software Supply Chains in Virtual Reality
摘要
As software capabilities increase and are delivered more frequently, further external software components (e.g., services, frameworks, platforms, or libraries) are incorporated. Thus, organizations and IT increasingly depend on more complex and dynamic Software Supply Chains (SSCs). Yet, the entire set of components involved are often opaque for end users, businesses, and even developers. Software Bill of Materials (SBOM) formats (SPDX, CycloneDX) provide essential information regarding components, yet their voluminous text and 2D tool visualization limitations obscure the underlying models and SSC. This paper contributes an immersive Virtual Reality (VR) solution concept VR-SBOM towards holistic contextualized multi-layout visualization of SSCs with heterogeneous SBOMs. Our prototype implementation demonstrates its feasibility, while a scenarios-based case study exhibits its potential and scalability.