About the Course
Modern software and AI systems increasingly rely on third-party components, libraries, services, datasets, and machine-learning models, creating complex supply chains in which security, licensing, provenance, and other risks can propagate across dependencies. SBOMs and AIBOMs have emerged as mechanisms for providing visibility into these supply chains, but their practical value depends on their adoption, accuracy, completeness, maintenance cost, and integration into development and organizational processes.
The course introduces empirical approaches to studying software engineering phenomena and applies them to the emerging area of software and AI supply chains. The first part provides an introduction to empirical research in Software Engineering, discussing qualitative and quantitative strategies and research methods such as surveys, case studies, experiments, systematic and multivocal literature reviews, mining software repositories, and cohort studies.
The second part focuses on software and AI supply chains, introducing Software Bill of Materials (SBOMs) and AI Bill of Materials (AIBOMs), their role in managing dependencies and supply-chain risks, and the empirical evidence currently available. The course will discuss, in particular, empirical studies on SBOM adoption among practitioners, mining studies of open-source repositories, empirical evaluation of SBOM generators, and a multivocal literature review on AIBOMs.
The course will also consider how empirical evidence can inform the development and evaluation of SBOM/AIBOM tooling, including fine-grained SBOM generation and AIBOM generation.
Dates and Location
November 18th -19th in Oulu.
Registration and Additional Information
More information and registration link can be found here: https://inforte.jyu.fi/events/empirical-insights-into-software-and-ai-supply-chains-understanding-and-enhancing-sbom-and-aibom. Registration is open until November 8.
This seminar is free-of-charge for Inforte.fi member organization’s staff and their PhD students. For others the participation fee is 400 €. The participation fee includes access to the event and the event materials. Lunch and dinner are not included.
Doctoral students participating in the seminar can obtain 2 credit points. This requires participating and completing the assignments. Please note that online participation is not possible.