US 12,632,241 B1Granted

Composite software bill of materials analysis

AssigneeAmazon Technologies, Inc.

InventorsRoland Mesde, George Sherif Kamal Hanna, Nitin Giri, Michael Kenneth Dosenbach, Prasad Vyawahare, Ziad Elmalki, Sean Crutchlow, Seungjin Lee, Paul Mangiamele

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A software bill of materials management and analysis service generates a data structure for analytical operations using a composite software bill of materials (composite SBOM) and performs one or more analytical operations. The composite SBOM may be generated using a plurality of software bill of materials (SBOMs). The software bill of materials management and analysis service may perform analytical operations including, an impact analysis, a license assessment, and a vulnerability analysis. The software bill of materials management and analysis service maintains traceability records for one or more changes made to the composite SBOM and allows audit of changes for the composite SBOM.

Claims20

Dependent claims

A system, comprising:

one or more processors;
and
a memory, storing program instructions that when executed on or across the one or more processors, cause the one or more processors to implement a vehicle software bill of materials management and analysis service, configured to:
receive a composite software bill of materials (composite SBOM) for a vehicle or a fleet of vehicles, the composite SBOM comprising vehicle software artifact instances generated using at least a first software bill of materials (first SBOM) and a second software bill of materials (second SBOM) for the vehicle or the fleet of vehicles;
format the composite SBOM into a data structure for performance of an analytical operation, wherein:
the data structure is a property graph comprising nodes representing the vehicle software artifacts instances of the composite SBOM, wherein the property graph represents the vehicle software artifact instances at a determined granularity of specificity of a plurality of granularities of specificity included in the composite SBOM;
and
different nodes of the property graph are labeled with at least one differing identity attribute at the determined granularity of specificity;
and
perform the analytical operation using the formatted data structure.

7 more elements

One or more non-transitory, computer-readable storage media, storing program instructions that when executed on or across one or more computing devices cause the one or more computing devices to implement:

receiving, using a vehicle software bill of materials management and analysis service, a composite software bill of materials (composite SBOM) for a vehicle or a fleet of vehicles, the composite SBOM comprising vehicle software artifact instances generated using at least a first SBOM and a second SBOM for the vehicle or the fleet of vehicles;
formatting the composite SBOM into a data structure for performance of an analytical operation, wherein:
the data structure comprises data structure components representing the vehicle software artifacts instances of the composite SBOM at determined granularities of specificity;
and
different data structure components of the data structure are associated with at least one differing identity attribute;
and
performing the analytical operation using the formatted data structure.

4 more elements

Dependencies are inferred from the claim text.