Simple definition
The SBOM is a concept or mechanism used in cybersecurity for the software components of a product.
Technical definition
In a business environment, SBOM mainly intervenes for the software components of a product for the Novitier. Its implementation depends on the architecture, equipment and security policies in place.
What’s the point?.
To inventorize the software components of a product.
Concrete example
an application publishes the libraries and versions it takes in.
Common problems
- incomplete inventory.
- transitive dependence.
- format not integrated.
To be noted: Always adapt the diagnosis to the version of the product and to the architecture actually deployed.