OWASP Expands SBOM Capabilities, Accelerating Innovation and Supply Chain Risk Reduction
Jan 12, 2022
OWASP CycloneDX v1.4 Now Available
Wakefield, Massachusetts Jan 12, 2022 (Issuewire.com) - OWASP today, launched an updated version of the CycloneDX Software Bill of Materials (SBOM) standard. CycloneDX version 1.4 adds significant new cybersecurity capabilities aimed at driving innovation and increasing the operational efficiency of SBOM across the software supply chain.
With this release, CycloneDX adds the ability to communicate vulnerabilities and their exploitability for software-defined in a bill of materials. This capability, known as Vulnerability Exploitability Exchange (VEX), works with SBOMs, forming a comprehensive view of possible risk. Together, the combination of SBOM and VEX can significantly reduce the efforts and costs associated with vulnerability management.
VEX is an integral part of the CycloneDX standard, providing the convenience of leveraging a single format and toolchain. Automated analysis of CycloneDX SBOMs and VEX is further made possible by a formal Uniform Resource Name (URN) namespace, currently in review by IETF, which will provide deep-linking capabilities between SBOMs and VEX.
"VEX is the biggest contextual information gap for widespread and efficient SBOM transparency across the software supply chain," said Patrick Dwyer, co-lead of the CycloneDX Core Working Group. "Today, we are introducing new capabilities for suppliers to accurately and efficiently communicate third party component vulnerability risks in the context of their assembled software, systems, and embedded devices."
The CycloneDX standard exceeds the Minimum Elements for Software Bill of Materials as defined by the National Telecommunications and Information Administration (NTIA). Adopting CycloneDX allows organizations to quickly meet these minimum requirements and mature into using more sophisticated use cases over time.
"We've had tremendous support from the community in the development of version 1.4," says Steve Springett, co-lead and Chair of the CycloneDX Core Working Group. "The advancements made in this release provide a springboard to further adoption, innovation, and help to reduce risk in the global software supply chain".
CycloneDX is a modern bill of materials standard supporting SBOM, SaaSBOM, and a wide range of other uses. With today's launch, CycloneDX additionally adds enhanced support for hardware devices bridging gaps between traditional SBOMs and IoT, ICS, and other embedded systems.
Discover the many capabilities that CycloneDX provides at https://cyclonedx.org/capabilities/.
Media Contact
Steve Springett
7739982050
401 Edgewater Place, Suite 600
Source :OWASP
This article was originally published by IssueWire. Read the original article here.
More News
Endemol Shine Brasil & Grupo Podpah Set Digital Partnership Led By ‘Temptation Island’
EXCLUSIVE: Banijay has partnered with Grupo Podpah, one of Latin America’s biggest creator and digital content outfits. Podpah, which began as a podcast brand, has built a deep YouTube and social media presence in Brazil where it operates digital channels and produces original shows. It has the Podpah TV and Madhouse TV YouTube channels, as […]
Chuck Lorre Says CBS “Hated” Melissa McCarthy Casting In ‘Mike & Molly’: “They Wanted A Hot Young Woman”
Chuck Lorre opens up about casting Melissa McCarthy in Mike & Molly and the pushback he faced from CBS. In his memoir Sitcom, Lorre described the “torturous journey” of getting the network to approve the Gilmore Girls alum as its lead star. “Once again, my brilliant casting director, Nikki Valko, brought in a comic genius. Melissa McCarthy. […]
‘Helluva Boss’ Season 3 Episode Schedule: When Do New Episodes Come Out? Part 1 Finale Date Revealed
Helluva Boss Season 3 is here, but the new episodes aren’t arriving all at once. The animated comedy returned to […] The post ‘Helluva Boss’ Season 3 Episode Schedule: When Do New Episodes Come Out? Part 1 Finale Date Revealed appeared first on Just Jared - Celebrity News, Entertainment News & Photos.
Nia Long Joins Teyana Taylor’s Directorial Debut ‘Get Lite’ at Paramount (EXCLUSIVE)
After starring in the blockbuster biopic “Michael,” Nia Long has joined the cast of Teyana Taylor’s directorial debut “Get Lite.” The Paramount movie stars Emmy winner Storm Reid and NFL rookie-turned-actor Ceyair Wright. Wright (“Space Jam: A New Legacy”) plays a talented, but sheltered, dance student who finds inspiration, love and family in the last […]
ESPN Launches ESPN JV YouTube Channel for Kids
ESPN JV isn’t for second-stringers. The new YouTube channel aims to cultivate younger sports fans who will keep the Disney sports-media giant in mind as they grow up. The new channel, to be found at youtube.com/@ESPNJV will feature interactive challenges and appearances by both familiar Disney characters and top sports figures as well as videos […]
Celebrities React to Shane Gillis’ ‘SNL’ Monologue: Who Criticized Him & the 1 Who Found It ‘Funny’
Shane Gillis‘ Saturday Night Live hosting gig has caused lots of talk online. If you don’t know, the 38-year-old stand […] The post Celebrities React to Shane Gillis’ ‘SNL’ Monologue: Who Criticized Him & the 1 Who Found It ‘Funny’ appeared first on Just Jared - Celebrity News, Entertainment News & Photos.
Adventures in Babysitting’s Elisabeth Shue Makes Rare Public Outing
Each time we see Elisabeth Shue, we can’t wait to see her again. Luckily, the Adventures in Babysitting alum surprised fans with an ultra-rare red carpet appearance at the premiere...
4,200 Miles From Graceland, This Town Is Crazy About Elvis
Each September, tribute acts and fans flock to the seaside town of Porthcawl, Wales, to celebrate Elvis’s life and music, and to party.
RadicalMedia’s New CEO Wants to Test Business Models That Give Production Powerhouse Stakes in Work It Does for Others
At production powerhouse RadicalMedia, the only thing constant is change. Originally conceived as a way for founders Jon Kamen and Frank Scherma to explore new content formats after many years in the advertising business, the firm now has a reputation as a go-to place for music documentaries, branded entertainment and long-form content. Radical Media has […]
From Bob Hope to Macy’s Thanksgiving Day Parade to ‘Wicked: One Wonderful Night’: How NBC Became America’s Home for TV Specials
It didn’t get great reviews. The host was awkward on camera as he navigated the emerging medium. The musical numbers and sketches didn’t translate well to the home screen. But none of it mattered. Bob Hope’s first-ever television special for NBC — “The Frigidaire Star Spangled Revue” — was a big hit with viewers when […]
Jamie Foxx Boards Indie Crime Thriller ‘East of the River’ as Producer (EXCLUSIVE)
Jamie Foxx has joined the indie crime thriller “East of the River” as a producer. He boards through his Foxxhole Productions alongside Alex Marks. The film, directed by Dennis Latos, follows two estranged brothers reuniting to face the underground poker ring that destroyed their family. The film stars Ben Barnes (“The Chronicles of Narnia” franchise, […]
Travis Kelce’s Alleged Deleted Tweets About Women — And A Seriously Uncomfortable Podcast Clip About What Turns Him On — Have Resurfaced After He Liked Shane Gillis’s Misogynistic “SNL” Monologue
From referring to women as “breeders” to a “creepy” joke about consent and seriously problematic alleged deleted tweets, here’s a breakdown of all of Travis’s controversies. View Entire Post ›
Recommended
YOUR NEWS, OUR NETWORK.
Do you have Great News you want to tell the world?
Be it updates about your business or your community, you can make sure that it’s heard by submitting your story to our network reaching hundreds of news sites across 6 verticals.