InsideEdgeInsideEdge
Download App

Phase 10 · Application Security (AppSec)

Topics

Software Composition Analysis (SCA)

Part of the Cybersecurity Roadmap.

Summary

Scanning a project's third-party dependencies for known vulnerabilities — since most modern applications are built on many external libraries, this is often where the most exploitable vulnerabilities actually live.

How to Learn This

  • 1Run an SCA scan (like Snyk or Dependabot) on a sample project and review flagged dependencies.
  • 2Learn why a project can be vulnerable through a transitive dependency it doesn't directly control.
  • 3Understand why keeping dependencies updated is simple in theory but often neglected in practice.

Previous

Dynamic Application Security Testing (DAST)

Next

API Security

More topics in Application Security (AppSec)

Secure SDLC ('Shift Left')Threat ModelingStatic Application Security Testing (SAST)Dynamic Application Security Testing (DAST)API SecuritySecure Code ReviewSecurity Champions ProgramsDevSecOps Practices
InsideEdge

Stuck on this topic? Ask an Insider

Get 1:1 guidance from people who've walked this exact path — free on the InsideEdge app.

Download
InsideEdge