On the heels of President Biden's executive order focused on improving the Nation's cybersecurity, Software Bill of Materials (SBOM) has garnered unprecedented attention from security professionals in all niches of information security. With good reason, too - how are we supposed to secure mission critical systems (or any system, for that matter) if we don't know what software they're running and the various dependencies and supply chain behind that software?
Adoption and implementation of SBOM is no small task; many organizations - even the device manufacturers themselves - are taking on this new challenge having never heard the term just a few years ago.
Thankfully, there are a host of tools and resources that organizations can use to generate, ingest, and otherwise use SBOMs in their daily operations, many of which are listed on the official CycloneDX tool center, including our own NetRise Turbine, which has been recently recognized as an official source for CycloneDX SBOMs. NetRise Turbine also supports other SBOM formats such as SPDX, as well as an interactive SBOM that customers can natively explore within the application.
SBOMs are a great step in gaining visibility and better understanding the risk associated with xIoT devices across the enterprise, but they're only part of the story. Contact us today to schedule a demo, and see how NetRise is using SBOMs and a host of other core features of our platform to enable our customers' xIoT security program.
About NetRise
NetRise is the software supply chain security company that exists to eliminate blind trust in software forever. By identifying every component in each binary image across firmware, kernels, operating systems, containers, and applications, NetRise exposes the full stack of inherited risk that source-based tools, vendor SBOMs, and questionnaires cannot see. Non-code related risk uncovered includes hidden dependencies, cryptographic artifacts, misconfigurations, secrets, among others. Global enterprises that produce and consume software, including government agencies, rely on NetRise to validate what they ship and what they run. When unforeseen software vulnerabilities are exploited by bad actors, NetRise answers the question, “where am I exposed?” enabling rapid identification, prioritization, mitigation, and policy updates, reducing material risk to the business. https://www.netrise.io/
