No, SBOM Will Not Solve All Your Software Supply Chain Problems

No ratings

Presented at Shmoocon 2024 by

No, you don’t actually want an SBOM. Seriously: If one more person tells me they would have stopped the Solarwinds attack with SBOM or vuln management, I am going to go insane… more insane. Join me for a cathartic (at least for me) rant about software supply chain security.