An Empirical Study on Software Bill of Materials: Where We Stand and the Road Ahead

Understand

The rapid growth of software supply chain attacks has attracted considerable attention to software bill of materials (SBOM).

• SBOMs are a crucial building block to ensure the transparency of software supply chains that helps improve software supply chain security.
• Although there are significant efforts from academia and industry to facilitate SBOM development, it is still unclear how practitioners perceive SBOMs and what are the challenges of adopting SBOMs in practice.
• Furthermore, existing SBOM-related studies tend to be ad-hoc and lack software engineering focuses.