SBOM
Also called: software bill of materials
Software bill of materials: a list of the components and libraries, with versions, that make up a piece of software, like an ingredients label. When a flaw is found in an open-source component, an SBOM lets you quickly see which of your systems are affected. Ask vendors for one when buying, and generate them automatically in the build process for software you develop.
Further reading: www.cisa.gov
From the Security Academy
Supply Chain Attacks: When Trusted Software and Vendors Become the Way In
From SolarWinds, Kaseya and 3CX to xz-utils: the main types of supply chain attack and how vendor risk management, SBOMs and least privilege limit the impact.
9 min read ·
Advisories that mention this term
No advisories mention this term yet.