IETF - RFC 9472
A YANG Data Model for Reporting Software Bills of Materials (SBOMs) and Vulnerability Information
active, Most Current
| Organization: | IETF |
| Publication Date: | 1 October 2023 |
| Status: | active |
| Page Count: | 18 |
scope:
To improve cybersecurity posture, automation is necessary to locate the software a device is using, whether that software has known vulnerabilities, and what, if any, recommendations suppliers may have. This memo extends the Manufacturer User Description (MUD) YANG schema to provide the locations of software bills of materials (SBOMs) and vulnerability information by introducing a transparency schema.
Document History
RFC 9472
October 1, 2023
A YANG Data Model for Reporting Software Bills of Materials (SBOMs) and Vulnerability Information
To improve cybersecurity posture, automation is necessary to locate the software a device is using, whether that software has known vulnerabilities, and what, if any, recommendations suppliers may...