The project
Vulnerabilities in check
Supply Chain Security is a web-based management system for tracking the security vulnerabilities that affect companies’ products.
The software has two parts: the back end includes the data persistence and segregation logic, the front end includes the user interface and the SPDX file parsing logic.
What we did
- Web development
- Cloud architecture
- d3.js charts
Client
Hitachi
Sector
Cybersecurity
Cloud
Microsoft Azure
Format
SPDX
Methodology
SCRUM
Features
What it does
- User management
- Product management
- Company management
- Vulnerability data
- SBOM management
- SPDX file import
- SBOM status
- Vulnerability status
- Component diagram
Architecture
How it works
- SPDXThe front end reads SPDX files, the list of a product’s components.
- Front endAngular 12 and d3.js for the interface and the diagrams.
- Back endSpring Boot stores the data and keeps it separate for each company.
- AzureAzure SQL Server, Azure Spring Cloud and Azure AD for sign-in.
Technologies