CISA plans to release white paper on software identity as part of effort to understand vulnerabilities

The Cybersecurity and Infrastructure Security Agency this summer will put out a white paper on software identity to start a conversation about creating a common understanding of vulnerabilities, according to agency official Allan Friedman.

Friedman said the white paper, intended to spark input on what the “future looks like” for software identity, is part of CISA’s role in “thinking about vulnerability across the global ecosystem” by bringing together all the “different voices.”

CISA’s work on Software Bill of Materials has...