The SBOM-Erstellung ohne Quellcode by Langlauf Security is a Binary Software Composition Analysis (SCA) solution that generates Software Bill of Materials (SBOMs) without requiring access to source code or dependency files. It utilizes the built software as its sole information source, extracting necessary data directly from final artifacts such as binaries, containers, images, and installers.
The tool employs marker-based detection, analyzing byte sequences and assembly code to identify included libraries and standalone programs. It supports complex analytical cases, including legacy software and statically linked libraries in stripped binaries without debug symbols. The solution facilitates supply chain security, compliance audits, export control evaluations, and the detection of license and patent violations.
