SBOM
Technology & Computing abbreviation · Cybersecurity
| Stands for | Software bill of materials |
|---|---|
| Categories | Technology & Computing |
SBOM stands for Software bill of materials, a cybersecurity abbreviation.
A machine-readable inventory of all components, libraries and versions that make up a piece of software, like an ingredients list. It lets customers check quickly whether a newly disclosed vulnerability affects products they use.
Example: The procurement contract requires vendors to provide an SBOM in CycloneDX or SPDX format.
Usage notes
US Executive Order 14028 on cybersecurity (2021) pushed SBOM adoption for software sold to the federal government. The main formats are SPDX, from the Linux Foundation, and CycloneDX, from OWASP. The EU Cyber Resilience Act also requires manufacturers to document product components.
Related abbreviations
More cybersecurity abbreviations
- RBAC – Role-based access control
- RCE – Remote code execution
- RSA – Rivest-Shamir-Adleman
- SAML – Security Assertion Markup Language
- SASE – Secure access service edge
- SAST – Static application security testing
- SCA – Software composition analysis
- SHA – Secure Hash Algorithm
- SHA-256 – Secure Hash Algorithm 256-bit
- SIEM – Security information and event management
- SOAR – Security orchestration, automation and response
- SOC – Security operations center