SPDX SYSTEM FOR MANAGING vulnerability OF SOFTWARE USING SPDX TECHNOLOGY AND METHOD THEREOF

摘要

Disclosed are a system and a method for managing vulnerability of a software by using software package data exchange (SPDX) technology. According to an embodiment of the present invention, the system for managing vulnerability of a software by using SPDX technology comprises a sending system matching vulnerability information on an open-source software to SPDX information to manage matching information based on a matched resu a detection system comparing the matching information provided by the sending system with previously registered reference SPDX information to detect a vulnerable software; and a management system controlling operation of the vulnerable software according to a vulnerability degree of the vulnerable software detected by the detection system.