Re: [Mud] [OPSAWG] SBOMs and version non-specific MUD files

Christopher Gates <chris.gates@velentium.com> Fri, 04 February 2022 20:42 UTC

From: Christopher Gates <chris.gates@velentium.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>, dick@reliableenergyanalytics.com, mud@ietf.org, opsawg@ietf.org
Date: Fri, 04 Feb 2022 20:40:15 +0000
Message-Id: <em63a52887-4f6b-419e-a584-67bd164de65c@vwdl7400-36262r2>
In-Reply-To: <27407.1644006641@localhost>
References: <282926.1643996393@dooku> <686901d819f9$8ffc5720$aff50560$@reliableenergyanalytics.com> <27407.1644006641@localhost>
Reply-To: Christopher Gates <chris.gates@velentium.com>
User-Agent: eM_Client/8.2.1659.0
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------=_MB555ECB3C-B6DE-4590-937C-40BA2E1D09C5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mud/GIJWReU-ZULvNRkHs15lIJJkcD8>
Subject: Re: [Mud] [OPSAWG] SBOMs and version non-specific MUD files
Precedence: list

There are already public databases with both secured and public SBOMs
https://sbom.rkvst.io/publicsboms

Christopher Gates

--------------------------------

Director of Product Security

www.velentium.com

(805)750-0171

Las Vegas, NV

(GMT-8)



Our new book is now shipping:

Medical Device Cybersecurity for Engineers and Manufacturers

U.S. 
<https://us.artechhouse.com/Medical-Device-Cybersecurity-A-Guide-for-Engineers-and-Manufacturers-P2128.aspx> 
| Worldwide 
<https://uk.artechhouse.com/Medical-Device-Cybersecurity-A-Guide-for-Engineers-and-Manufacturers-P2073.aspx>

Amazon 
<https://www.amazon.com/Medical-Device-Cybersecurity-Engineers-Manufacturers/dp/1630818151/ref=sr_1_1?dchild=1&keywords=Axel+Wirth&qid=1592335625&sr=8-1> 
& Digital 
<https://us.artechhouse.com/Medical-Device-Cybersecurity-for-Engineers-and-Manufacturers-P2174.aspx>

Security Book Of The Year! 
<https://engineering.tapad.com/the-best-information-security-books-of-2020-e7430444fbd4>



“If everyone is thinking alike, then somebody isn't thinking.” -George 
S. Patton

"Facts are stubborn things."  -John Adams, 1770


------ Original Message ------
From: "Michael Richardson" <mcr+ietf@sandelman.ca>
To: dick@reliableenergyanalytics.com; mud@ietf.org; opsawg@ietf.org
Sent: 2/4/2022 12:30:41 PM
Subject: Re: [OPSAWG] SBOMs and version non-specific MUD files

>
>Dick Brooks <dick@reliableenergyanalytics.com> wrote:
>     > The predominant "SBOM delivery channel" I see is through access controlled
>     > customer portals where customers can download SBOM's Vulnerability
>     > Disclosures and other artifacts needed to perform a NIST C-SCRM risk
>     > assessment for Executive Order 14028.
>
>For hospitals, sure.
>For baby monitors, maybe not.
>
>
>--
>Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
>            Sandelman Software Works Inc, Ottawa and Worldwide
>
>
>
>
-- 
Disclaimer: The information and attachments transmitted by this e-mail are 
proprietary to Velentium, LLC and the information and attachments may be 
confidential and legally protected under applicable law and are intended 
for use only by the individual or entity to whom it was addressed. If you 
are not the intended recipient, you are hereby notified that any use, 
forwarding, dissemination, or reproduction of this message and attachments 
is strictly prohibited and may be unlawful. If you are not the intended 
recipient, please contact the sender by return e-mail and delete this 
message from your system immediately hereafter.

[Mud] SBOMs and version non-specific MUD files Michael Richardson
Re: [Mud] [OPSAWG] SBOMs and version non-specific… Dick Brooks
Re: [Mud] [OPSAWG] SBOMs and version non-specific… Michael Richardson
Re: [Mud] [OPSAWG] SBOMs and version non-specific… Dick Brooks
Re: [Mud] [OPSAWG] SBOMs and version non-specific… Dick Brooks
Re: [Mud] [OPSAWG] SBOMs and version non-specific… Christopher Gates
Re: [Mud] [EXTERNAL SOURCE] Re: [OPSAWG] SBOMs an… Tony Turner