
The increasing intricacy of enterprise software supply chains has heightened cybersecurity vulnerabilities, often exploited through obscure third-party components. Software Bill of Materials (SBOM) has emerged as a vital instrument to enhance transparency, reduce attack surfaces, and accelerate vulnerability response. This study examines SBOM adoption within the framework of NIST regulatory guidelines, emphasizing its impact on vulnerability management and risk mitigation in enterprise software supply chains. A scalable architecture is proposed, integrating automated SBOM generation, secure storage, and vulnerability intelligence feeds. Implementation challenges and organizational considerations are analyzed. Empirical findings demonstrate SBOM's efficacy in strengthening cybersecurity posture, providing actionable guidance for practitioners and policymakers.
Software Bill of Materials; SBOM; Enterprise Software Supply Chain; NIST; Cybersecurity; Vulnerability Management; Attack Surface Reduction; Regulatory Compliance; Software Transparency; Risk Mitigation.
Software Bill of Materials; SBOM; Enterprise Software Supply Chain; NIST; Cybersecurity; Vulnerability Management; Attack Surface Reduction; Regulatory Compliance; Software Transparency; Risk Mitigation.
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 0 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Average | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Average |
