⌕ Поиск по атласу

IETF · RFC · RFC9472

RFC9472 · A YANG Data Model for Reporting Software Bills of Materials (SBOMs) and Vulnerability Information

A YANG Data Model for Reporting Software Bills of Materials (SBOMs) and Vulnerability Information

To improve cybersecurity posture, automation is necessary to locate the software a device is using, whether that software has known vulnerabilities, and what, if any, recommendations suppliers may have. This memo extends the Manufacturer User Description (MUD) YANG schema to provide the locations of software bills of materials (SBOMs) and vulnerability information by introducing a transparency schema.

Официальная английская аннотация

To improve cybersecurity posture, automation is necessary to locate the software a device is using, whether that software has known vulnerabilities, and what, if any, recommendations suppliers may have. This memo extends the Manufacturer User Description (MUD) YANG schema to provide the locations of software bills of materials (SBOMs) and vulnerability information by introducing a transparency schema.

Связи документа

Официальный источник · 2023-10-01

Полные импортированные сведения карточки
{
  "id": "RFC9472",
  "number": 9472,
  "title_en": "A YANG Data Model for Reporting Software Bills of Materials (SBOMs) and Vulnerability Information",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "To improve cybersecurity posture, automation is necessary to locate the software a device is using, whether that software has known vulnerabilities, and what, if any, recommendations suppliers may have. This memo extends the Manufacturer User Description (MUD) YANG schema to provide the locations of software bills of materials (SBOMs) and vulnerability information by introducing a transparency schema.",
  "authors": [
    "E. Lear",
    "S. Rose"
  ],
  "organizations": [],
  "publication_date": "2023-10-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "ops",
  "area_ru": "Эксплуатация и управление",
  "working_group": "opsawg",
  "source_draft": "draft-ietf-opsawg-sbom-access-18",
  "page_count": 18,
  "doi": "10.17487/RFC9472",
  "keywords": [],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9472/",
    "html": "https://www.rfc-editor.org/rfc/rfc9472.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9472.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9472/"
  }
}