Open access
Oct 2026
DeepSCA: Dependency-Aware Software Composition Analysis for C/C++ Based on a Curated Code Feature Database
Software Composition Analysis (SCA) identifies reused third-party libraries (TPLs) and their dependencies, forming the basis of Software Bills of Materials (SBOMs) for securing software supply chain. Current C/C++ SCA techniques extract code features and match them against a TPL feature database. However, detection rec...
Mei-Qiu Xu, Xi-Bin Zhao, Wen-Xuan Yu et al.
· Proceedings of the ACM on So... · 1 citation