Ludovic Courtès, Maxim Cournoyer, Jan Nieuwenhuizen, Simon Tournier — March 4, 2024 What does it take to “identify software”? How can we tell what software is running on a machine to determine, for example, what security vulnerabilities might affect it? In October 2023, the US Cybersecurity and Infrastructure Security Agency (CISA) published a white paper entitled Software Identification Ecosystem