Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SBOM

Top Tools for Automating SBOMs

We’ve talked a lot about why software bills of materials (SBOMs) are important and how they communicate the value of your organization, so we won’t continue those lectures here. We’re all good on the why so today we’ll talk about the how – the best (and free!) tools to help you create SBOMs automatically. Creating an SBOM manually is arduous and error-prone so why not avoid it altogether?

Create SBOM on Gradle with the CycloneDX Plugin

The Software Bill of Materials (SBOM) has become essential in application security as it provides a comprehensive list of every element within a software build. This is important because vulnerabilities can often emerge in third-party or transitive dependencies, not just in the main code. SBOM is used not only for vulnerability discovery but also to detect and understand open-source license violations in advance.

What is a Software Bill of Materials (SBOM)?

A software bill of materials (SBOM) is a detailed, comprehensive list of all the components within a software application, including the use of open-source software, component dependencies, licenses, and known vulnerabilities. SBOMs provide an inventory of each individual component that comprises the application, much like a list of ingredients in a recipe.

Safeguard the authenticity of your Dropbox files with DataTrails

When you connect DataTrails to your Dropbox account we automatically create a small amount of additional metadata about your files each time they change, and record that information on an immutable ledger. Those files are now equipped with long-term integrity and the ability for anyone to instantly verify the provenance and authenticity of your digital content using our free no-need-to-sign-up tool, Instaproof. And best of all, you don’t need to change your workflows! You can continue to email your files around, or send them through your favorite transfer app, and wherever they end up their provenance will be verifiable.

Breakthrough fraud detection & content protection with watermarks + immutable audit trails

Unravel the truth behind every image with Digimarc and DataTrails. Our demo showcases our approach to exposing fakes and validating authentic images. Verifying the origin of an image is as easy as drag and drop. Witness the innovative combination of Digimarc's watermarking technology and DataTrails' immutable audit trails, which together offer a robust solution to the challenges of digital misinformation. This powerful collaboration ensures the integrity of images online, making it simpler than ever to distinguish genuine content from deceptive visuals.

Combat the Erosion of Trust in Digital Media w/ Jon Geater CPO/CTO at DataTrails

Trust in digital media is consequential — from the practical verification of the source of a news photograph to the less visible web infrastructure that impacts society and economies of scale. In this Community Showcase, we’re focusing on solutions that build transparency into our digital ecosystem. See Jon Geater's demo on maintaining the integrity of data across business and application boundaries with the DataTrails platform.

EBOM vs. MBOM vs. SBOM: Key Differences & Best Practices

Managing all aspects of the product development cycle is a crucial element of a profitable company. Most businesses understand that an efficient product lifecycle depends on the proper positioning and management of the Bills of Materials (BOM), be it for product designing and manufacturing or software development. Getting all the BOMs right is the essential first step toward achieving operational efficiency.

Bringing Immutable Audit Trails to Dropbox

In the age of Gen AI, it is now apparent that we can no longer trust what we see and read. The fakers have the upper hand: while typical security approaches rely on scaling up teams, attacks scale at the press of a button. To safely move forward and realize the benefits Gen AI enables, we need a better trust model that adds integrity, transparency and trust to all data and a common provenance format that captures origin, authenticity and lineage information. We must verify data before we use it.

Detect Fakes and Prevent Misuse: Digital Content Integrity, Authenticity & Transparency

As supply chains continue to evolve and new Al technology becomes part of every business, traditional trust systems that rely on human interactions to verify and validate data will struggle to keep pace. Digital supply chain practices from media through software to physical goods must adapt to this changing global technology landscape. The innovations unleashed in GenAI have made it apparent that we can no longer trust what we see and read; we must verify data before we use it.