OWASP Toronto | Software Bill of Materials (SBOM) And Security Via Transparency

TALK

The Software Bill of Materials (SBOM) and Security Through Transparency

Summary:

The recent software supply chain attacks that have been rocking the internet show how important it is to have the right solution to ensure immediate visibility of the blast radius of new vulnerabilities. Join us to learn one of the most effective ways to rapidly identify systems impacted through a proper SBOM Strategy, to help organizations secure their software supply chain and reduce risk of cyber attacks. We’ll dive into:

• SBOM Analogy
• SBOM History
• Why it makes sense?
• SBOMs, Languages and Formats
• Difference between VEX and SBOM

Presenter:

Dmitry Raidman

Dmitry is a Canadian-Israeli entrepreneur and cybersecurity professional who has been around the technology ecosystem for over two decades. Dmitry’s specialty is in the area of application security, cloud architecture, DevOps, DevSecOps, and automation of cyber-defense mechanisms. Dmitry co-founded Cybeats in 2016. In late 2018 Dmitry joined the NTIA group that worked to shape the SBOM standard. In 2020 Dmitry invented the SBOM Studio solution to help Enterprises consume and manage SBOMs. To give back to the cybersecurity community, Dmitry co-founded the Security Architecture Podcast during COVID-19 pandemic in 2020. Today Dmitry is leading the innovation, technology, and product in Cybeats as CTO and participates in various working groups to define the future of SBOM, VEX, CSAF, PACE, and OpenC2.