The Evolution of Software Supply Chain Security in AI

Software supply chain security has adapted with the introduction of artificial intelligence, as traditional models now face new complexities. Unlike conventional software, where the components remain static until a new build, AI's dynamic nature requires continuous monitoring of changes and dependencies throughout its runtime. This shift necessitates an expansion of the standard Software Bill of Materials (SBOM) to accommodate AI-specific elements, such as information about models and training datasets. The challenge lies in understanding these real-time alterations and the associated risks that may arise, highlighting the need for a comprehensive approach to AI supply chain transparency.