US 2025/0030719 A1 · SOFTWARE BILL OF MATERIALS AND VULNERABILITY MANAGEMENT VIA DEEP PACKET INSPECTION

Abstract

A software bill of materials (SBOM) and vulnerability management system (“system”) disclosed herein extracts software component-related identifiers for Internet of Things (IoT) devices using deep packet inspection. The system filters the identifiers by removing identifiers that match a blacklist of identifiers known to not correspond to software components. The system then populates SBOM fields using a database storing the filtered identifiers with a schema that is uniform across SBOM file formats and queries a vulnerability database with software components indicated in the filtered identifiers to identify vulnerabilities for each IoT device for security risk assessment.

Claims20

Dependent claims

A method comprising:

extracting a first plurality of identifiers from network traffic of a first device, wherein at least a subset of the first plurality of identifiers comprises identifiers of at least one of software components and software component versions on the first device;
filtering the first plurality of identifiers to obtain of the subset of the first plurality of identifiers that correspond to at least one of the software components and software component version;
and
generating a software bill of materials (SBOM) file for the first device based, at least in part, on the subset of the first plurality of identifiers.

1 more element

An apparatus comprising:

a processor;
and
a machine-readable medium having instructions stored thereon that are executable by the processor to cause the apparatus to,
parse traffic logs of network traffic of a plurality of devices to extract a first plurality of identifiers, wherein at least a subset of the first plurality of identifiers comprises at least one of software component identifiers and software component version identifiers of software components on one or more of the plurality of devices;
filter the first plurality of identifiers to obtain the subset of the first plurality of identifiers;
and
populate fields of one or more software bill of materials (SBOM) files for one or more of the plurality of devices with the subset of the first plurality of identifiers.

4 more elements

Dependencies are inferred from the claim text.

Software bill of materials and vulnerability management via deep packet inspection

Life of this patent

Software bill of materials and vulnerability management via deep packet inspection

Life of this patent

Abstract

Claims20