What’s in the Box? Software Bill of Materials for IoT
summary
Covers Software Bill of Materials (SBOM) for IoT devices, explaining industry consensus on what an SBOM should include and why it increases transparency about third‑party software components. Describes an initial playbook and tools that IoT vendors can use to publish their dependencies, and how enterprise customers can use SBOMs to inform risk decisions; assumes basic knowledge of IoT software development but also accessible to policy and business audiences.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 0:53Whats in the Box
- 1:40Transparency
- 2:33Why IoT
- 3:23IoT is everywhere
- 4:16Asset management
- 5:06Vulnerability database
- 5:34Dependencies
- 7:47Minimum Ass Bomb
- 8:36How do we do it
- 10:27We must do anything
- 11:18The government is involved
- 11:39The bad news
- 12:17Medical Device Sandbox
- 12:41Case Studies
- 14:42Open Questions
- 21:29Can you do this today
- 26:45Cyber Independent Testing Lab
- 28:02Government vs Security
related talks
47mSoftware Bill of Materials - Contents List for Software
35mSBOMs: Navigating the Evolving Landscape of Software Bill of Materials
16mSBOM, the Beginning of Transparency
38mWhat the &#% Is in That SBOM? How to Provide Users What Software Components Are Included
01h 26mPractical Software Bill of Materials: From Generation to Distribution Workshop
52mTooling up: Getting SBOMs to Scale
30mTransparency in the Software Supply Chain: Making SBOM a Reality
25mA Primer on Software Bill of Materials for DevSecOps