Automating SBOM Generation with Zero-Shot Semantic Similarity

arXiv:2403.08799v1 Announce Type: cross
Abstract: It is becoming increasingly important in the software industry, especially with the growing complexity of software ecosystems and the emphasis on security and compliance for manufacturers to inventory software used on their systems. A Software-Bill-of-Materials (SBOM) is a comprehensive inventory detailing a software application's components and dependencies. Current approaches rely on case-based reasoning to inconsistently identify the software components embedded in binary files. We propose a different route, an automated method for generating SBOMs to …

application arxiv bill complexity compliance components cs.cr cs.se current dependencies ecosystems important industry inventory manufacturers materials sbom security security and compliance semantic similarity software systems