An Intelligent Security Detection and Response Scheme Based on SBOM for Securing IoT Terminal devices
Wei Wu, Pu Wang, Lei Zhao, Wei Jiang · 2023
Recently, with the frequent occurrence of security incidents such as Apache Log4j vulnerabilities and “SolarWinds hack”, the security of open source software (OSS) has gained attention from the academia and industry. In the face of the complex and serious security issues of OSS in various application, like IoT system, software bill of materials (SBOM) has been applied to improve the security of OSS by constructing the relationships among software dependencies. However, SBOM is just appended as a static description without extra exploiting. Therefore, we propose an intelligent security detection and response scheme based on SBOM which is utilized to construct a system component dependency tree (CDT) and a component querier with the Bloom filter. Besides, a security threat assessment algorithm is designed to accurately evaluate the security risk level how the vulnerability discovered in the software system affects software system. Based on the results and analysis, the scheme can realize effective vulnerability detection and evaluation for OSS systems, e.g., IoT systems.