Improving Security and Software Management Through the Use of SWID Tags

Waltermire, David; Feldman, Larry; Witte, Gregory

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov. [12:20 pm ET - If you received "Page Not Found" errors recently, please retry accessing those files. File synchronization should now be complete.]

ITL Bulletin

Improving Security and Software Management Through the Use of SWID Tags

Documentation Topics

Date Published: July 2016

Author(s)

David Waltermire (NIST), Larry Feldman (G2), Gregory Witte (G2)

Abstract

This bulletin summarized the information presented in NISTIR 8060, "Guidelines for the Creation of Interoperable Software Identification (SWID) Tags". The publication provides an overview of the capabilities and usage of SWID tags as part of a comprehensive software lifecycle.

Keywords

software; software asset management; software identification (SWID); software identification tag

Control Families

Audit and Accountability; Configuration Management; Maintenance; Media Protection; Planning; System and Services Acquisition; System and Communications Protection; System and Information Integrity

Documentation

Publication:
July 2016 ITL Bulletin (pdf)

Supplemental Material:
None available

Related NIST Publications:
IR 8085 (Draft)
IR 8060

Document History:
07/13/16: ITL Bulletin (Final)

Topics

Security and Privacy

audit & accountability, planning, security automation