Cybersecurity definition
What is SBOM?
SBOM stands for Software Bill of Materials.
By Cyber Tool Stack Editorial TeamUpdated
Definition
A formal, machine-readable inventory of every open-source and third-party component that makes up a piece of software, so an organization can quickly tell whether a newly disclosed vulnerability affects anything it runs.
Where SBOM fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
VEXVulnerability Exploitability eXchangeA companion standard to SBOM that states whether a known vulnerability in a listed component is actually exploitable in the way the software uses it, cutting down the noise of vulnerabilities that technically exist but can't be triggered.Supply Chain AttackAn attack that compromises a trusted upstream component — a software dependency, a build pipeline, a vendor's update mechanism — so the malicious code rides along into every downstream organization that uses it.CVECommon Vulnerabilities and ExposuresA public catalog that assigns a unique identifier to a specific, publicly known software or hardware vulnerability, so vendors, researchers, and tools can all refer to the same flaw unambiguously.