Software Bill of Materials (SBOM) Sharing Lifecycle Report Presentation
Software Bill of Materials (SBOM) Sharing Lifecycle Report Presentation
99 GENERAL AND MISCELLANEOUS↗
Engineering topics
Williams, Tyler
Publications and source records attributed to Williams, Tyler.
Software Bill of Materials (SBOM) Sharing Lifecycle Report
As Software Bill of Materials (SBOM) adoption efforts mature, SBOM sharing continues to occur, but no single solution or set of solutions have become ubiquitous. The purpose of this report is to enumerate and describe the different parties and phases of the SBOM sharing lifecycle and assist readers in choosing suitable SBOM sharing solutions based on the amount of time, resources, subject-matter expertise, effort, and access to tooling that is available to the reader to implement a phase of the SBOM sharing lifecycle. The SBOM sharing lifecycle consists of the Discovery, Access, and Transport of an SBOM and this report details these individual phases and how an SBOM goes from author to the consumer. This report also details how potential enrichment activities may be performed on an SBOM to create a new product before or after it has been shared. The concept of a sophistication classification for SBOM sharing solutions is concurrently introduced with a focus on the inclusion or lack of certain features and effort associated with their implementation. Examples of low, medium, and high-sophistication solutions are provided; however, these examples and associated categorizations should not be seen as a qualitative judgment meant to push the reader towards a particular adoption strategy since sharing solutions are chosen based on the unique needs of the user. This report does recommend the SBOM community consider how to make current and future sharing solutions interoperable with each other as well as more automated methods to facilitate sharing and broader SBOM adoption. This report also highlights an SBOM sharing survey results obtained from interviews with stakeholders to understand the current SBOM sharing landscape. The categorized results of the survey suggest that SBOMs are currently transported directly to the receiver through email or similar informal communication mechanisms or alternatively the SBOM resides on a repository available to consumers. In addition to these transport methods, this report captures industry efforts to create private sharing solutions and services that can store and transport enrichment data and may use higher sophistication features that are cloud-based or using distributed ledger technologies.
97 MATHEMATICS AND COMPUTING↗
Development of In-Situ Chlorine Generator for Metal Purification (End of Contract Report)
It has been demonstrated that rare-earth and actinide metals can be purified via conversion to chlorides and heating to volatilize impurities. To this end, BYU has been working towards designing, building, and testing a system that incorporates the chlorine gas generation method into the chloride volatility process. The efforts made towards the project tasks listed in the Statement of Work are addressed in the following sections. Finally, a report on information related to this project that has been published or presented is addressed. By the end of the contract period, small-scale tests using LaCl 3 -CaCl 2 to generate Cl 2 had been conducted, the produced Cl 2 was successfully reacted with Ce foil to create CeCl 3 , initial designs for the large-scale apparatus were completed, and manufacturing for the large-scale apparatus had begun.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Multi-electrode/multi-modal atmospheric pressure glow discharge plasma ionization device
Apparatus include an atmospheric pressure glow discharge (APGD) analyte electrode defining an analyte discharge axis into an APGD volume, and a plurality of APGD counter electrodes having respective electrical discharge ends directed to the APGD volume, wherein the APGD analyte electrode and the APGD counter electrodes are configured to produce an APGD plasma in the APGD volume with a voltage difference between the APGD analyte electrode and one or more of the AGPD counter electrodes. An electrode can be integrated into an ion inlet. Apparatus can be configured to perform auto-ignition and/or provide multi-modal operation through selectively powering electrodes. Electrode holder devices are disclosed. Related methods are disclosed.
Koppenaal, David W.↗
FEMP Cyber Security Arsenal
The FEMP Cyber Security Arsenal is a family of cyber security tools for the federal facility owners and operators. Using these tools, facility owners can evaluate their overall cybersecurity posture. These tools are web-based front-end tools. This is an upgrade of the tools available from the earlier version in DOE CODE ID: #41457
Gourisetti, Sri Nikhil Gupta↗
Blockchain Applicability and Cybersecurity Frameworks (BAF)
The Blockchain Applicability and Cybersecurity Frameworks is the implementation of an earlier invention disclosure and Provisional Patent Application: S-146,805, Battelle IPID 31608-E. —BAF walks a user (or an interested party) through ~100 controls to determine various factors, including: 1. Does the application need a blockchain? 2. If the application needs a blockchain, does it need a private blockchain or permissionless/public blockchain? 3. What kind of consensus is most suitable for the application? The current version of BAF evaluates between four consensus mechanisms: proof-of-work, proof-of-stake, proof-of-burn, and proof-of-authority.
Gourisetti, Sri Nikhil Gupta↗