Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Guidelines for the Creation of Interoperable Software Identification (SWID) Tags

Published

Author(s)

David A. Waltermire, Brant Cheikes, Larry Feldman, Gregory A. Witte

Abstract

This report provides an overview of the capabilities and usage of software identification (SWID) tags as part of a comprehensive software lifecycle. As instantiated in the International Organization for Standardization/International Electrotechnical Commission 19770-2 standard, SWID tags support numerous applications for software asset management and information security management. This report introduces SWID tags in an operational context, provides guidelines for the creation of interoperable SWID tags, and highlights key usage scenarios for which SWID tags are applicable.
Citation
NIST Interagency/Internal Report (NISTIR) - 8060
Report Number
8060

Keywords

software, software asset management, software identification (SWID), software identification tag
Created April 22, 2016, Updated November 10, 2018