Podcasts Technology RSA Conference SBOM: Where Weve Come From, and Where Were Going

SBOM: Where Weve Come From, and Where Were Going

Published: March 21, 2022, 4:18 p.m.

Across the security world, there\u2019s a growing appreciation about the need to better understand our software supply chain. Transparency won\u2019t solve all our problems, but will lay a foundation for greater resilience and more informed decisions. This discussion will review the basics of SBOM, using the recent log4j vulnerability to understand how SBOM can help across the software ecosystem\u2014and also understand its limits. We\u2019ll also delve into the future of SBOM, exploring some of the gaps, where we need to focus to advance the state of the art. Our ultimate goal should be the integration of SBOM into the broader vulnerability and security data ecosystem through automation.\n\nSpeakers:\nAllan Friedman, Senior Advisor and Strategist, CISA\nKacy Zurkus, Content Strategist, RSA Conference