Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

A Radiography of a SBOM Vulnerability Scanner

Devoxx via YouTube

Overview

Explore the critical importance of Software Bill of Materials (SBOM) in cybersecurity and supply chain management through this informative conference talk. Delve into the aftermath of Log4Shell and SpringShell vulnerabilities, and understand the significance of the US President's Executive Order 140028 and the EU's NIS2 directive in shaping cybersecurity practices. Learn about the effective use of SBOMs, including their capabilities, appropriate tools, implementation strategies, and underlying mechanisms. Discover how SBOMs surpass traditional dependency scanning in vulnerability resolution and offer comprehensive protection. Gain insights into integrating SBOMs into DevSecOps pipelines and leveraging their intelligence across various organizational roles. Examine practical examples focusing on Syft for SBOM generation and format transformation, as well as comparing Grype and bomber for vulnerability scanning and intelligence gathering.

Syllabus

[VDIASI23] - Olimpiu Pop & Steve Poole - A radiography of a SBOM vulnerability scanner

Taught by

Devoxx

Reviews

Start your review of A Radiography of a SBOM Vulnerability Scanner

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.