TY - CHAP A1 - Falter, Sandro A1 - Brunkh, Gerald A1 - Wess, Max A1 - Fischer, Sebastian T1 - Automated Vulnerability Scanner for the Cyber Resilience Act T2 - CLOUD COMPUTING 2024 : The Fifteenth International Conference on Cloud Computing, GRIDs, and Virtualization, 15, 2024, Venice N2 - This paper explores the mitigation of the compliance burdens faced by manufacturers of digital products under the Cyber Resilience Act. After providing a concise overview of the Cyber Resilience Act and pinpointing pivotal areas where tool-based interventions could reduce the regulatory strain on manufacturers, we introduce two prototypes: a digital checklist for product classification and a prototype to streamline the analysis and monitoring of the security state of software along the software development life cycle. As the second prototype is based on Static Application Software Testing and Software Component Analysis, we validate the approach through benchmark tests. While Static Application Software Testing tools show promise in identifying vulnerabilities, additional tests are needed for full compliance with the Cyber Resilience Act. In general, the prototypes serve as an entry point for identifying possible automation potential to alleviate the compliance burdens of manufacturers. KW - cra KW - cyber resilience act KW - vulnerability scanner KW - reporting KW - iot KW - cloud Y1 - 2024 UR - https://www.thinkmind.org/library/CLOUD_COMPUTING/CLOUD_COMPUTING_2024/cloud_computing_2024_1_40_28004.html SN - 978-1-68558-156-5 SP - 13 EP - 18 PB - IARIA ER -