Does Flexera have a paper on the discovery of Open Source Software & in particular for Log4J
Jan 26, 2022 04:59 AM
There is a great article on how to use the FNMS agent file scan to identify problematic log4j files: https://community.flexera.com/t5/FlexNet-Manager-Blog/Finding-installations-of-Apache-Log4j-or-other-files-on/ba-p/217513
This might have limits if OSS is highly integrated, like code-wise.
Jan 26, 2022 11:38 AM
Here are some other resources related to Log4j that you may find interesting reading:
In terms of discovery of open source software components that are included in other software, the following info may be helpful: What is Software Composition Analysis?
Feb 01, 2022 05:02 PM
There is a great article on how to use the FNMS agent file scan to identify problematic log4j files: https://community.flexera.com/t5/FlexNet-Manager-Blog/Finding-installations-of-Apache-Log4j-or-other-files-on/ba-p/217513
This might have limits if OSS is highly integrated, like code-wise.
Jan 26, 2022 11:38 AM
Thank you
Jan 26, 2022 11:47 AM
Here are some other resources related to Log4j that you may find interesting reading:
In terms of discovery of open source software components that are included in other software, the following info may be helpful: What is Software Composition Analysis?
Feb 01, 2022 05:02 PM