The Life of an SBOM: Where does it go and what do organizations do to it and with it?
Anita D'Amico, Ken Zalevsky
BSides NYC 2024 · Day 1 · Tech - Other
In an era of increasing software supply chain attacks and regulatory scrutiny, the Software Bill of Materials (SBOM) has emerged as a critical tool for transparency and risk management. This talk, presented by industry veterans Anita D'Amico and Ken Zalevsky, delves into the often-overlooked "life" of an SBOM beyond its initial generation. They explore the complex journey an SBOM takes from producer to consumer, highlighting the operational challenges and strategic opportunities for leveraging this data to enhance security, compliance, and maintainability across diverse industries.
AI review
A competent, well-structured survey of SBOM lifecycle operations from two practitioners with genuine industry credentials — Zalevsky's 20 years at Bayer gives the medical device use cases real weight. The content is solid but fundamentally synthesizes what CISA, NSA, and NIST have already published rather than contributing original research or data, and the 'demo' section is transparently a product pitch for Vigilant Ops.