TagVault.org is a non-profit organization formed under the structure of IEEE-ISTO. It is a registration and certification authority for software identification tags (SWID tags) based on the ISO/IEC 19770-2:2009 standard. TagVault is a member-driven organization that provides a forum for sharing information and resources about software tags among software publishers, tool providers and SAM practitioners. TagVault provides a shared library of technical knowledge and software tools including consistent cross-vendor, cross-platform APIs.
Software ID (SWID) tags have come a long way since the ISO/IEC 19770-2:2009 standard was published. Today, there are numerous publishers including tags in their products, tool providers that are creating or reading and using tags and sophisticated customers who’ve recognized the value of SWID tags.
An article providing a high level view of how SWID tags support better cyber security was published in the March/April 2013 edition of Crosstalk. The mission of the CrossTalk magazine is:
CrossTalk, The Journal of Defense Software Engineering, is an approved U.S. Department of Defense journal. CrossTalk's mission is to encourage the engineering development of software in order to improve the reliability, sustainability, and responsiveness of our warfighting capability and to inform and educate readers on up-to-date policy decisions and new software engineering technologies.
Expect to see more presentations about this topic in webinars and presentations from TagVault.org.
Download the .pdf of the article, or read the complete magazine on the CrossTalk webiste (the article is on page 34).
Thank you to the sponsors of the 2012 Software Identification Summit for helping to make the event successful!
2012 proved to be a series of major successes towards the goal of ensuring end-user organizations receive the information and data they require to more effectively manage security, compliance and logistics issues for software.
Today iQuate, the automated IT discovery, inventory and measurement specialists for large enterprises, announced its support of Tagvault.org and the organizational benefits enabled by ISO/IEC 19770-2:2009 Software ID (SWID) tags.
TagVault.org has outgrown its current website structure. The TagVault.org website has provided quite a bit of information to the community, but has not always been the easiest to navigate, nor to update! We are extremely happy to announce that the website is going through a complete refresh at the moment. TagVault.org has engaged with the development team, Cloud Four to redesign and refresh the website to make it significantly more usable for everyone.
The 2012 Software Identification Summit was held on May 2nd and the responses received from attendees were extremely positive. The event allowed attendees to network with other organizations in the software ecosystem who focus on accurate and consistent software identification data. Attendees to the summit left with new contacts and a significant amount of information about the current and near term status of SWID tags.
Slides from the sessions may be accessed through the link below. Videos of the sessions will be available from the TagVault.org website in the near future.
Cicala and Associates published an open letter to software publishers. This letter allows individuals and organizations to make a clear statement to their software vendors the vendors need to work together as a community to make it easier to identify and track software for any product from any vendor on any platform in a consistent and accurate manner.
Background information on Pat and this effort is provided below.
Take a moment of time to read the letter and provide an indication of support by filling out the survey. It’s critical for the software licensing ecosystem to speak up about this issue and this is an ideal way to do just that!