Making Use of All Those SBOMs-Eric Byrnes
6Our industry has been through numerous high-profile supply chain incidents, prompting an Executive Order mandating the supply of Software Bill of Materials (SBOMs) for all “critical software.” Thanks to a fruitful collaboration between government and industry, SBOM standards are now a reality; however, outstanding questions remain on how SBOMs will actually contribute to better security. This session will discuss how SBOMs can be more than just bureaucratic paperweights: we’ll share how to convert the mountains of data inside SBOMs into actionable threat and risk intelligence. Attend this presentation to: Understand the anatomy of an SBOM Learn what additional data is necessary for SBOMs to be truly useful Discover how industry leaders are using SBOM data today and where they are heading Hear how the industry can handle the legacy device problem Understand repercussions and alternatives if a vendor can’t (or won’t) generate SBOMs for their clients You will leave this session knowing how to use SBOMs to reduce risk in your industrial control systems.
View upcoming Summits: http://www.sans.org/u/DuS
Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE