Cybeats Sweat Equity
Cybeats innovative security suites give business leaders visibility and control over the materials and technology in their products. SBOM Studio gives transparency into your software’s reputation, nature and popularity with cybersecurity insights for the entire product lifecycle using SBOMs.
For the June 2022 Cybersecurity Automation Workshop, Cybeats will provide software tools, infrastructure support, and in-person participation.
Cybeats SBOM Studio will be used to demonstrate Posture Attribute Collection & Evaluation (PACE) use cases. Since the PACE OpenC2 interfaces are still being defined, liberal use of the hand-waving lycan will be used to convert from the PACE interface to the Cybeats APIs.
The use cases which will be demonstrated are:
- Command inserting SBOM into PACE system (SBOM Studio)
- Command retrieving original SBOM from PACE system (SBOM Studio)
- Command retrieving converted SBOM (eg SPDX to CycloneDX) from PACE system (SBOM Studio
- Command requesting posture evaluation of a CVE (eg log4shell) returning which products contain the component affected by the CVE (eg log4j)
- Command requesting posture evaluation of an SBOM returning vulnerabilities and licensing policy violations
- Command requesting posture evaluation comparing SBOMs from two versions of a product, returning the security posture difference between the the two versions - eg which vulnerabilities were fixed