Open Source and Software Supply Chain Security

Q. Roles and a Public Website for an Operator’s S/W Supply Chain Security Management

1. Roles between the developer (development organization) and the operator (operations organization) for S/W supply chain security 2. SBOM security vulnerability scanner for S/W operators 3. SBOM OSS vulnerability scanning website How to use: SBOM Vulnerability Scanner https://sbomvul.wikisecurity.net/Step 1. Click the text box and select a JSON-format SBOM file through the Windows Explorer window.Step 2. Click

Q. Vulnerability Information Attributes in the SBOM Specification for Software Supply Chain Security

The Ministry of Science and ICT (Korea Internet & Security Agency), the National Intelligence Service, and the Digital Platform Government Committee recently released the ‘Software (SW) Supply Chain Security Guideline 1.0’ jointly, and many companies and institutions are likely holding internal discussions on SBOM together with supply chain security. Integrating vulnerability information attributes into the