Open Compliance Summit 2019

Hitachi develops and provides enterprise systems with a large amount of software including OSS, and the number of software used at Hitachi is increasing year by year. Additionally, software vulnerability is detected and reported quite often. Therefore, it is getting hard for Hitachi to continuously recognize vulnerabilities of all software components. SW360 is an OSS software that can manage software components in projects and can collect related vulnerability information, by using CVE security vulnerability information database. It can be used to continuously recognize and manage software vulnerabilities in each project. Currently, SW360 doesn’t have vulnerability notification function by email, so he is developing a tool for it. In this session, he will explain connection between Hitachi’s software component management database and SW360, configuration and usage of REST API of SW360.