Overview
Explore the concept of Software Bill of Materials (SBOM) for cloud services in this 53-minute conference talk by Nisha Kumar from Oracle. Delve into the challenges of applying traditional SBOM practices to cloud-based software and services. Examine the relevance of providing component lists for software accessed via APIs and network interactions. Investigate the Cloud Security Alliance's Shared Responsibility Model and its implications for cloud service transparency. Analyze various use cases where detailed service operation information proves beneficial. Discuss why the term "SBOM" may be inadequate for cloud environments and consider alternative approaches to addressing security and transparency concerns in cloud computing.
Syllabus
Is SBOM for the Cloud Even a Thing? - Nisha Kumar, Oracle
Taught by
Linux Foundation