Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

NISTIR 8060

Guidelines for the Creation of Interoperable Software Identification (SWID) Tags

Date Published: April 2016

Author(s)

David Waltermire (NIST), Brant Cheikes (MITRE), Larry Feldman (G2), Gregory Witte (G2)

Abstract

Keywords

software; software asset management; software identification (SWID); software identification tag
Control Families

Audit and Accountability; Configuration Management; Maintenance; Media Protection; Planning; System and Communications Protection; System and Information Integrity; System and Services Acquisition

Documentation

Publication:
NISTIR 8060 (DOI)
Local Download

Supplemental Material:
Guideline Summary for NISTIR 8060 (xls)
Schema Definition for NISTIR 8060 (other)

Related NIST Publications:
NISTIR 8085 (Draft)
ITL Bulletin

Document History:
04/22/16: NISTIR 8060 (Final)