|a Futurum companyCoverage
Cloud NativeCI/CDDevSecOpsPlatform EngineeringDataOpsContinuous TestingLow-Code / No-CodeIT as CodeEnterprise DevOpsMedia
Techstrong TV LiveVideo InterviewsTech Field DayTechstrong GangAgents of DevSecurity BoulevardCloud Native NowDigital CxO
Contributing Writer
Steve educates teams on the strategy and specifics of developing secure software. He practices security at every stage of the development lifecycle by leading sessions on threat modeling, secure architecture and design, static/dynamic/component analysis, offensive research, and defensive programming techniques. Steve's passionate about helping organizations identify and reduce risk from the use of third-party and open source components. He is an open source advocate and leads the OWASP Dependency-Track project, OWASP Software Component Verification Standard (SCVS), and is the Chair of the OWASP CycloneDX Core Working Group, the leading Software Bill of Materials (SBOM) standard.
With supply chain security becoming more of a focus, the SBOM is now viewed as a critical element in shoring up supply chain security. SBOM stands for software bill of materials. At a very elementary level, an SBOM is a list of ingredients. Think about how every food product in the supermarket lists ingredients so, [โฆ]
Mar 22, 2022 ยท 3 min