一句话：提出多阶段 SBOM 模型并实现 Linux 发行版软件包 SBOM 生成工具，效果优于现有工具。
现代软件开发广泛依赖第三方库与框架，软件供应链的风险与可追溯性问题日益突出，软件物料清单（SBOM）因此被引入以提升透明度。现有 SBOM 研究多集中于编程语言生态，针对 Linux 发行版的研究仍很有限，而 Linux 发行版的基础性地位与内在复杂性使其高质量 SBOM 的生成既关键又困难。本文开展两阶段研究：首先分析 Linux 发行版软件包的特征，提出多阶段 SBOM 模型；随后基于该模型设计并实现了面向 Linux 发行版软件包的 SBOM 生成工具 LiPSBOMaker。评估结果表明，该方法优于当前最先进的 SBOM 生成工具。
Modern software development often relies on third-party libraries and frameworks to enhance productivity and reduce costs, leading to the emergence of software supply chains and the increasing visibility of their potential risks. To enhance traceability and transparency in the software supply chain and mitigate associated risks, the concept of a Software Bill of Materials (SBOM) has been introduced. While extensive research has been conducted on SBOMs within programming language ecosystems, studies focusing on Linux distributions remain limited. Given the fundamental role and inherent complexity of Linux distributions, generating high-quality SBOMs for them is both critical and challenging. To address this issue, this paper presents a two-phase study: 1) We analyze the characteristics of Linux distribution packages and propose a multi-stage SBOM model. 2) Based on this model, we design and implement a tool for generating SBOMs for Linux distribution packages. The evaluation results imply that our approach outperforms the state-of-the-art SBOM generation tool.