The case for SBOM benchmarks: "Ground truth" is key

Software Bills of Materials (SBOM) are designed to help software teams protect their supply chains, by making the composition of applications more transparent. But a lack of standardization creates a challenge for using SBOMs to bolster security.

Researchers Henrik Plate and Joseph Hejderup exposed the challenges when they ran several SBOM tools on the same software product as part of an evaluation for Endor Labs. They discovered discrepancies in the results. Naming conventions also contributed to variable output.

"Every SBOM …

applications benchmarks bills bolster case challenge challenges endor labs evaluation exposed key labs making product protect researchers results sbom sboms security software standardization supply supply chains teams tools truth