EP116 SBOMs: A Step Towards a More Secure Software Supply Chain
Cloud Security Podcast by Google
00:00
Why S-Bombs Matter to Security Leaders
S-bombs provide the answer that. every piece of software has an S-bomb, I can very quickly as a vulnerability management practice establish where is this weak component or how should I think about risking my organization? It gives you a picture of where particular components show up in your dependencies and when you know those components are vulnerable to something, you can then make reactive moves to protect your organization or your customers. But some software vendors perhaps don't really like the concept because just like with food analogy, presumably some food manufacturers back when before it was mandatory didn't want to have the disclosure.
Transcript
Play full episode
