Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SBOM

Hands-on guide: How to scan and block container images to mitigate SBOM attacks

According to OpenLogic’s Open Source Adoption and Expansion in 2022 Report, the adoption of Open Source Software (OSS) across all sizes of organizations is rising with 40% of respondents stating an increase of OSS software over the previous year and 36% reporting a significant increase in OSS software usage. The increase in OSS adoption can be attributed to a number of factors including access to the latest innovations, reduction in costs and frequent product updates.

RKVST Track and Trace Demo

This demo is an example of how RKVST was used to collect information from different databases and different suppliers to form a single source of truth for the full lifecycle of an asset - which in this case is a disposal container for nuclear waste. RKVST provenance-as-a-service enables organizations to authenticate data and build trustworthy digital supply chains. It also makes it quick and easy to locate an asset.

Top 5 uses of blockchain in supply chain

It’s April, designated National Supply Chain Integrity month by CISA, NCSC, ONCD and Department of Defense, to promote resources, tools, and information to help organizations and agencies secure their supply chains and build resilience. But what role does blockchain play in supply chain and how easy is it to implement? Blockchain technology has numerous potential applications in supply chain due to its ability to provide a secure, transparent, and tamper-proof ledger of transactions.

Top 10 SBOM Tools in 2023

Imagine this: you’re a developer working on a critical software application that thousands of people use daily. You’ve spent countless hours writing and testing code and are proud of what you’ve created. But as the application grows more complex and new features are added, you worry about potential security risks. How can you be sure that every component and dependency is secure and up-to-date? It’s a daunting task that can keep you up at night.

SBOM - Tanium Tech Talks #58

What is the software supply chain and why should I care? What open source vulnerabilities are hiding in my environment? How can I find them? Find out on today's #Tanium Tech Talk. Governments are now getting involved in the software supply chain risk and requiring vendors to publish an #SBOM (software bill of materials) to list the components within their software (like a list of ingredients on a package of cookies).

What Will it Take to Establish a Ground Truth for SBOMs?

A Software Bill of Materials – also known as an SBOM – has emerged as another effective tool in the arsenal as organizations look to secure their supply chains. But there is currently a lack of standardization for SBOMs, making it challenging to establish a ground truth. Use of SBOMs has gained momentum since the Biden Administration’s executive order mandating that IT providers that work with the federal government must provide an SBOM to do so. This is not just a U.S.

Postman Configuration for RKVST

We’re very pleased with our Python SDK, Jupyter Notebooks, and our OpenAPI Developer Console but sometimes we all want a bit more fine control or command chaining than those can offer. One of my favourite tools for such situations is, of course, Postman. It can make interacting with RKVST super quick and easy, and help you develop custom workflows for storing and validating your digital evidence ledgers.

SBOM Explained: An enterprise guide to security risk management

In this age of technology, software companies are quickly shifting towards a strict compliance posture. You may ask yourself, why is that and what has changed over the last several years? This can be due to multiple factors but can mainly be boiled down into four categories.

What's in an SBOM?

More and more organizations are deploying a software bill of materials (SBOM) to identify and track the various components of the software products they develop or use. The goals of using SBOM might include a desire to enhance software security, comply with U.S. federal government mandates, improve the software supply chain or some other reason. Regardless of the motivation for deploying an SBOM strategy, it’s important to know exactly what goes into an SBOM.