Software Transparency Is Changing: Allan Friedman on SBOM, AI BOMs and What Comes Next
Modern software is built on layers of dependencies, open source components, third party libraries and increasingly, artificial intelligence models and external data sources. For security teams, understanding exactly what is running inside an application has become less of a compliance exercise and more of an operational necessity.
That is the foundation behind the Software Bill of Materials, or SBOM.
In a recent episode of the SecurityWeek Podcast, host Brian “SchleiF” Schleifer sat down with cybersecurity policy expert Allan Friedman for a wide-ranging discussion about the origins of SBOM, how organizations should actually use the data, the emergence of AI BOMs, vulnerability management, VEX, and where software transparency may be heading next.
Friedman, who helped drive early government and industry work around SBOM, offered perhaps the simplest explanation for why the concept matters.
“Software isn’t written, it’s assembled,” Friedman said. “What’s it assembled out of? More software.”
In practical terms,...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
