SEP 14, 2022 | US
Industry Cautions on Software Security Regs in the Defense Bill
Nextgov, September 14, 2022
By Chris Riotta
Technology trade groups are aligning against a proposal in the House-passed defense policy bill that would require software vendors to attest to the government that their products are free of known defects and to include a bill of materials describing their code.
The groups – the Alliance for Digital Innovation, BSA | The Software Alliance, the Cybersecurity Coalition and the Information Technology Industry Association – say that the legislation leapfrogs ongoing administrative efforts to establish software bills of materials (SBOMs) as part of the federal acquisition process. Those efforts, the groups say, are still in their developing stages and there isn't a consistent approach to SBOMs – essentially ingredient lists that tell what proprietary and open source components are included in software application.
"Ultimately, SBOMs will not achieve the desired utility for agencies at this point because of a lack of standardization," the groups said in a Sept. 14 letter to the heads of multiple committees of Congress. "This highlights the need for additional work to include guidance on the structure and construction of an SBOM and standardization of the processes for SBOM dissemination, ingestion, and use."
Original Posting: https://www.nextgov.com/cxo-briefing/2022/09/industry-cautions-software-security-regs-defense-bill/377148/
BSA 소개
소프트웨어 연합(BSA | The Software Alliance, 이하 BSA)(www.bsa.org)은 각국 정부를 대상으로 세계 시장에서 전 세계 소프트웨어 업계를 대변하고 옹호하는 선도적 연합체입니다. 세계의 가장 혁신적 기업들이 회원사로 참여하며 경제에 활기를 불어 넣고 현대의 생활을 향상시키는 소프트웨어 솔루션을 만들어 내고 있습니다.
워싱턴 DC에 본부를 두고, 30개국이 넘는 국가들에서 운영되는 BSA는, 합법적 소프트웨어 사용을 증진시키고 기술 혁신을 촉진하며 디지털 경제의 성장을 추진하는 공공 정책을 지지하는 준법 프로그램들을 선도합니다.