Artwork

Contenido proporcionado por DJ Schleen. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente DJ Schleen o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.
Player FM : aplicación de podcast
¡Desconecta con la aplicación Player FM !

What's in the box? Guest: Allan Friedman

24:23
 
Compartir
 

Manage episode 360973209 series 3462456
Contenido proporcionado por DJ Schleen. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente DJ Schleen o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.

A package of Twinkies is a permanent fixture on Allan Friedman's desk, which he holds up to the screen during our conversation. A prime example of the underlying purpose of a Software Bill of Materials. The significance? The ingredient list on the package which lets you know what's inside.

I always use the can of beans analogy myself - but the Twinkie - well, this is the bad stuff. Seems obvious that it's better to know what you're going to consume, then assume you're eating something healthy.

You can't help but think of Allan when you think about Software Bill of Materials. He's been advocating for the use of SBOMs to increase software supply chain transparency and enhance security for years.

One of his beliefs -

Organizations should not be using software without knowing what components are inside and any potential security risks. Particularly important in today's world, where software is an integral part of almost every aspect of our lives, from our smartphones to our cars to our homes.

It's National Supply Chain Integrity month and in this episode, we'll hear about some of the Government's views on SBOMs, and why the topic is so important.

Welcome back to daBom...

  continue reading

19 episodios

Artwork
iconCompartir
 
Manage episode 360973209 series 3462456
Contenido proporcionado por DJ Schleen. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente DJ Schleen o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.

A package of Twinkies is a permanent fixture on Allan Friedman's desk, which he holds up to the screen during our conversation. A prime example of the underlying purpose of a Software Bill of Materials. The significance? The ingredient list on the package which lets you know what's inside.

I always use the can of beans analogy myself - but the Twinkie - well, this is the bad stuff. Seems obvious that it's better to know what you're going to consume, then assume you're eating something healthy.

You can't help but think of Allan when you think about Software Bill of Materials. He's been advocating for the use of SBOMs to increase software supply chain transparency and enhance security for years.

One of his beliefs -

Organizations should not be using software without knowing what components are inside and any potential security risks. Particularly important in today's world, where software is an integral part of almost every aspect of our lives, from our smartphones to our cars to our homes.

It's National Supply Chain Integrity month and in this episode, we'll hear about some of the Government's views on SBOMs, and why the topic is so important.

Welcome back to daBom...

  continue reading

19 episodios

Semua episode

×
 
Loading …

Bienvenido a Player FM!

Player FM está escaneando la web en busca de podcasts de alta calidad para que los disfrutes en este momento. Es la mejor aplicación de podcast y funciona en Android, iPhone y la web. Regístrate para sincronizar suscripciones a través de dispositivos.

 

Guia de referencia rapida