A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Operations and Management Area Working Group
WG of the IETF.
Title : Discovering and Retrieving Software Transparency and
Vulnerability Information
Authors : Eliot Lear
Scott Rose
Filename : draft-ietf-opsawg-sbom-access-12.txt
Pages : 21
Date : 2022-10-09
Abstract:
To improve cybersecurity posture, automation is necessary to locate
what software is running on a device, whether that software has known
vulnerabilities, and what, if any recommendations suppliers may have.
This memo extends the MUD YANG model to provide the locations of
software bills of materials and to vulnerability information.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsawg-sbom-access/
There is also an htmlized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-opsawg-sbom-access-12
A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-opsawg-sbom-access-12
Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
_______________________________________________
OPSAWG mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsawg