The final goal of the FASTEN project is to be able to perform a more sophisticated analysis of security-vulnerability propagation, licensing compliance, and dependency risk profiles by relying on the call-level dependency network of the whole software ecosystem. In this talk, we will present some first results of the project and demonstrates how FASTEN works on top of Java/Maven ecosystem.

1. Intelligent Software Package Management

10. Current Solutions
Call Dependency
Networks (CDNs)

12. Data streams
Package repositories
Vulnerability information
FASTEN server
Call graph generators
Analysis layer
Security Change impact
Compliance Quality and Risk
Storage layer
REST
API
Web
UI
Continuous
Integration
servers

13. Demo

14. my-app
my-lib
sayHello(true)
3.0.0
my-other-lib
proxy()
1.0.0
sayHello()
3.0.0
sayHello(true)
sayHello()

15. my-app
my-lib
sayHello(“John”)
4.0.0
my-other-lib
proxy()
1.0.0
sayHello()
3.0.0
sayHello(boolean)
sayHello()
sayHello(String)

16. https://www.fasten-project.eu/
https://github.com/fasten-project
https://twitter.com/fastenproject
The FASTEN project has received funding from the European Union’s Horizon 2020 research
and innovation programme under grant agreement No 825328.
Questions?