No description available.

No description available.

No description available.

No description available.

No description available.

No description available.

No description available.

No description available.

Background.The rapid expansion of open-source software has introduced significant security challenges, particularly concerning supply chain attacks. Software supply chain attacks, such as the NotPetya attack, have underscored the critical need for robust security measures. Managing dependencies and protecting against such attacks have become important, leading to the emergence of Software Bill of Materials (SBOMs) as a crucial tool. SBOMs offer a comprehensive inventory of software components, aiding in identifying vulnerabilities and ensuring software integrity. Objectives. Investigate the information contained within SBOMs in Python and Gorepositories on GitHub. Analyze the evolution of SBOM fields over time to understand how software dependencies change. Examine the impact of the US Executive Order of May 2021 on the quality of SBOMs across software projects. Conduct dynamic vulnerability scans in repositories with SBOMs, focusing on identifying types and trends of vulnerabilities. Methods. The study employs archival research and quasi-experimentation, leveraging data from GitHub repositories. This approach facilitates a comprehensive analysis of SBOM contents, their evolution, and the impact of policy changes and security measures on software vulnerability trends. Results. The study reveals that SBOMs are becoming more complex as projects grow, with Python projects generally having more components than Go projects. Both ecosystems saw reductions in vulnerabilities in later versions. The US Executive Order of 2021 positively impacted SBOM quality, with measures like structural elements and NTIA guidelines showing significant improvements post-intervention. Integrating security scans with SBOMs helped identify a wide range of vulnerabilities. Projects varied in critical vulnerabilities, highlighting the need for tailored security strategies. CVSS scores and CWE IDs provided insights into vulnerability severity and types. Conclusions. The thesis highlights the crucial role of SBOMs in improving software security practices in open-source projects. It shows that policy interventions like the US Executive Order and security scans can significantly enhance SBOM quality, leading to better vulnerability management and detection strategies. The findings contribute to the development of robust dependency management and vulnerability detection methodologies in open-source software projects.

The purpose of this study was to investigate how three Swedish news publications writes about integration and immigrants. The news articles were analyzed with a rhetorical analysis. The method was supplemented with theories of media and ethnicity, agenda setting theory and gatekeeping theory. This study resulted in the conclusion that racist discourses are found in the three news publications, regardless of political color, writer or article genre. Many of the articles makes a clear division of "us and them", where "them" is defined by the text's "us", who are often Swedes. "Them" is described by the attributes that ”us” don't want to be associated with. Immigrants are often portrayed as victims of their culture or as a threat to Western society. There is also a clear link between immigrants, Islam and Muslims irrespective of where the immigrants come from. The articles on integration continues to talk of immigrants as a unified group but these articles are accusing politicians and organizations to a greater extent, for the integration problematics. Both topics are discussed mainly on the basis of values and feelings and statistics showing the whole context is missing.