Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

ITL Bulletin

Improving Security and Software Management Through the Use of SWID Tags

Date Published: July 2016


David Waltermire (NIST), Larry Feldman (G2), Gregory Witte (G2)



software; software asset management; software identification (SWID); software identification tag
Control Families

Audit and Accountability; Configuration Management; Maintenance; Media Protection; Planning; System and Services Acquisition; System and Communications Protection; System and Information Integrity


Download (pdf)

Supplemental Material:
None available

Related NIST Publications:
IR 8085 (Draft)
IR 8060

Document History:
07/13/16: ITL Bulletin (Final)


Security and Privacy

audit & accountability, planning, security automation