SWFLSec's 4th Year Anniversary!

Join us and a special guest speaker and author, Tony Turner, as we celebrate 4 years of continuous, monthly meetings (except for that one time we had a hurricane...).

Not All SBOMs are Created Equal

Software Bills of Material have rapidly emerged into the security parlance over the last few years as a response to the increasing threat of software supply chain and the pervasive security vulnerabilities found in the open source software we use every day. But not all SBOMs are created the same way or even contain the same data elements, and in many cases 2 SBOMs for the same product might disagree with each other. This presentation will explore the types of SBOMs, how they are generated and why some types are better for certain use cases. Attendees will become more familiar with the SBOM ecosystem and gain clarity about some of the murkiness of the security vendor marketing around these concepts.

Bio
Tony is a veteran security architect and engineer with over 25 years experience as an inside security practitioner, third-party consultant and R&D executive across IT and OT. He is the co-author of Software Transparency, is currently authoring an upcoming SANS course on Defending Product Supply Chains, leads the OWASP Orlando chapter, and is the Chief Editor for cyberinformedengineering.com, an open wiki dedicated to evangelizing the concepts of CIE. Tony founded and leads Opswright as CEO, a software company focused on securing critical infrastructure through the concepts of Cyber-Informed Engineering and is passionate about security transformational change.