NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Guidelines for the Creation of Interoperable Software Identification (SWID) Tags

Published

Author(s)

David A. Waltermire, Brant Cheikes, Larry Feldman, Gregory A. Witte

Abstract

This report provides an overview of the capabilities and usage of software identification (SWID) tags as part of a comprehensive software lifecycle. As instantiated in the International Organization for Standardization/International Electrotechnical Commission 19770-2 standard, SWID tags support numerous applications for software asset management and information security management. This report introduces SWID tags in an operational context, provides guidelines for the creation of interoperable SWID tags, and highlights key usage scenarios for which SWID tags are applicable.
Citation
NIST Interagency/Internal Report (NISTIR) - 8060
Report Number
8060
NIST Pub Series
NIST Interagency/Internal Report (NISTIR)
Pub Type
NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8060

Keywords

software, software asset management, software identification (SWID), software identification tag
Information technology, Cybersecurity and privacy and Internet of Things (IoT)

Citation

Waltermire, D. , Cheikes, B. , Feldman, L. and Witte, G. (2016), Guidelines for the Creation of Interoperable Software Identification (SWID) Tags, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8060 (Accessed October 9, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created April 22, 2016, Updated November 10, 2018
Was this page helpful?