Practical SBOM Management with Zephyr and SPDX

Explore practical Software Bill of Materials (SBOM) management for embedded systems using Zephyr and SPDX in this 42-minute conference talk. Learn how to identify and assess the components of a Zephyr application, including the kernel, device drivers, vendor HALs, and application code. Discover state-of-the-art standards and tools for generating, visualizing, and analyzing SBOMs to improve your security posture and respond to potential vulnerabilities. Gain insights into integrating SBOM management tools into your development workflow, enabling you to better assess and mitigate security risks in your embedded software projects.

Practical SBOM Management with Zephyr and SPDX - Benjamin Cabé, The Linux Foundation