Runtime software bill of materials
AssigneeTenable, Inc.
InventorLucas TAMAGNA-DARR
Life of this patent
Estimating the term…
Abstract
Aspects of the disclosure are directed to a “runtime” software bill of materials (SBOM) (e.g., a SBOM for software component(s) configured for execution on an end-device). In an aspect, the runtime SBOM includes common-path rood nodes corresponding to software component(s). In an aspect, each common-path rood node is further associated with dependent node(s) corresponding to software sub-component(s). Such aspects may provide various technical advantages, such as improved vulnerability tracking, particularly for software component(s) that are released by developer(s) without a developer-generated SBOM.
Claims30
A method performed by a device, comprising:
- populating a first software component that is configured for execution on the device as a first common-path root node of a runtime software bill of materials (SBOM);
- enumerating a first set of software sub-components associated with the first software component;
- populating, in the runtime SBOM, each software sub-component of the first set of software sub-components as a dependent node of the first common-path root node;
- and
- performing one or more actions associated with the runtime SBOM.
A device, comprising:
- one or more memories;
- one or more transceivers;
- and
- one or more processors communicatively coupled to the one or more memories and the one or more transceivers, wherein the one or more processors, either alone or in combination, are configured to:
- populate a first software component that is configured for execution on the device as a first common-path root node of a runtime software bill of materials (SBOM);
- enumerate a first set of software sub-components associated with the first software component;
- populate in the runtime SBOM, each software sub-component of the first set of software sub-components as a dependent node of the first common-path root node;
- and
- perform one or more actions associated with the runtime SBOM.
A non-transitory computer-readable medium storing computer-executable instructions that, when executed by a device, cause the device to:
- populate a first software component that is configured for execution on the device as a first common-path root node of a runtime software bill of materials (SBOM);
- enumerate a first set of software sub-components associated with the first software component;
- populate, in the runtime SBOM, each software sub-component of the first set of software sub-components as a dependent node of the first common-path root node;
- and
- perform one or more actions associated with the runtime SBOM.
Dependencies are inferred from the claim text.