Evolving vulnerabilities in CycloneDX
summary
Introduces the CycloneDX SBOM standard and focuses on its vulnerability extension, discussing the complexities of modelling software vulnerabilities. Reviews current issues and ongoing specification discussions, outlines proposed improvements, and invites community feedback and involvement in the open development process.
AI-written summary · about
related talks
50mSBOM SmackDown: Conquer dragons in the shadows with OWASP CycloneDX
32mCryptographic Governance: Software Supply Chain Security With CBOM
26mFlagship Projects: CycloneDX
40mHow I Learned to Stop Worrying and Love the SBOM
47mI Can’t Cope! How OWASP Is Helping To Manage Vulnerability Overload
30mIs CBOM Enough?
45mWhat’s in a Name? Vulnerabilities, SBOMs, and the Challenge of Software Identity
40mSBOM Ingestion and Analysis at New York-Presbyterian Hospital