UEFI Support for Software Bill of Materials (SBOM)

Logo
Presented by

Brian Mullen and Felix Polyudov, AMI

About this talk

Traditionally, capturing a Software Bill of Materials (SBOM) for UEFI firmware has been seen as challenging. Some technical challenges include immutable blobs in the image (e.g., Intel FSP and CPU microcode). Other roadblocks are due to a process where IHVs contribute binary DXE objects to the ODM. Finally, some challenges are due to commercial issues where code might be licensed from the IBV but modified by the ODM. This talk will focus on the following topics: - How to include accurate SBOM metadata that is compliant with NTIA’s The Minimum Elements For a Software Bill of Materials (SBOM) guidelines in a UEFI firmware project? - What edge conditions and use cases need to be considered when implementing SBOM? - What approaches can enable extracting and consuming SBOM data from one supply chain partner to another? The talk plans to address several industry-wide items necessary for a broader adoption of SBOM in the firmware ecosystem.
Related topics:

More from this channel

Upcoming talks (1)
On-demand talks (29)
Subscribers (3259)
Through a collaborative approach with world-class companies, institutions and experts, the UEFI Forum advances innovation in firmware technology standards. These extensible, globally-adopted UEFI specifications bring new functionality and enhanced security to the evolution of devices, firmware and operating systems.