Weaving the [X]BOM Fabric
summary
Proposes an eXtensible Bill of Materials pattern that digitizes hardware, software, data and people into interoperable BOMs and pilots xBOM Fabric prototypes that translate diverse SBOM formats (CycloneDX, SPDX) into a graph with weighted edges (JSON-native graphs with cost/quantity/risk weights) plus a semantic layer. Implements a microservice for canonical controlled vocabularies and maps ontologies (NIEM), uses ML (stacked random forests) for risk weights, and demonstrates reusable analyses for AI assurance, modeling & simulation, supply‑chain risk and talent management.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 6:48XBOMs and strategic importance
- 12:06Assets metadata and structures
- 17:44Semantic layer for interoperability
- 21:19Assets as weighted graph
- 27:41Collaboration and standards
- 31:13Semantic layers breaking silos
- 35:51XBOMs applications and analytics
- 40:50Demo talent management
- 42:14XBOMs future directions
related talks
01h 26mPractical Software Bill of Materials: From Generation to Distribution Workshop
35mSBOMs: Navigating the Evolving Landscape of Software Bill of Materials
40mDBOM and SBOM: New Options For Better Supply Chain Cybersecurity
38mEnhancing SBOM Generation: Filling the Gaps To Make Actionable SBO...
29mThe Current State of SBOMs for End Users
52mTooling up: Getting SBOMs to Scale
35mBOF: SBOMs for Embedded Systems: What's Working, What's Not?
35mTransforming SBOMs from Compliance Burden to Security Asset