Software is both "the problem" and "the solution". In the never ending push to deliver increasingly sophisticated and complex software functionality into the Enterprise or into the market, security vulnerabilities are inevitable. Software applications are increasingly comprised of dozens, hundreds (or more) modules of software from a broad spectrum of suppliers, all designed to provide specific functions that contribute to the eventual efficacy of the application. Unfortunately, the modules are not always "secure" and all too often in the integration process, vulnerabilities are introduced, creating security gaps. The software development community is on the front line in designing and building secure software and the push for Software Bill of Materials (SBOM) is just part of that process and one of the new frontiers in cyber security. This months blog for RSA...