From the course: IoT Product Security

Unlock this course with a free trial

Join today to access over 23,100 courses taught by industry experts.

IoT Bill of Materials: Part 1

IoT Bill of Materials: Part 1

From the course: IoT Product Security

IoT Bill of Materials: Part 1

Hi, I'm Matthew Clark. And this is Lesson 5.6: IoT Bill of Materials, Part 1. In this lesson, we're going to identify software statistics. We're going to take a look at the software bill of materials. We'll introduce software supply chain and also introduce software licensing. Let's take a look at the 2019 Sonatype State of Software Supply Chain report. I have no idea why all these reports seem to have such incredibly long names, but they do. This report found that there had been a 71 percent increase in the number of open source related breaches over the last five years. This report took a look at organizations that attempted to manage their supply chains and ones that did not manage it at all. And it found that in the managed supply chains, that 9.3 percent of the time component releases were vulnerable within the applications versus those that did nothing about their supply chain. They found that 20.7 percent of the time component releases were vulnerable. The report found…

Contents