U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

ITL Bulletin

Improving Security and Software Management Through the Use of SWID Tags

Date Published: July 2016


David Waltermire (NIST), Larry Feldman (G2), Gregory Witte (G2)



software; software asset management; software identification (SWID); software identification tag
Control Families

Audit and Accountability; Configuration Management; Maintenance; Media Protection; Planning; System and Services Acquisition; System and Communications Protection; System and Information Integrity


July 2016 ITL Bulletin (pdf)

Supplemental Material:
None available

Related NIST Publications:
IR 8085 (Draft)
IR 8060

Document History:
07/13/16: ITL Bulletin (Final)


Security and Privacy

audit & accountability, planning, security automation