U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Guidelines for the Creation of Interoperable Software Identification (SWID) Tags

Published

Author(s)

David A. Waltermire, Brant Cheikes, Larry Feldman, Gregory A. Witte

Abstract

This report provides an overview of the capabilities and usage of software identification (SWID) tags as part of a comprehensive software lifecycle. As instantiated in the International Organization for Standardization/International Electrotechnical Commission 19770-2 standard, SWID tags support numerous applications for software asset management and information security management. This report introduces SWID tags in an operational context, provides guidelines for the creation of interoperable SWID tags, and highlights key usage scenarios for which SWID tags are applicable.
Citation
NIST Interagency/Internal Report (NISTIR) - 8060
Report Number
8060
NIST Pub Series
NIST Interagency/Internal Report (NISTIR)
Pub Type
NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8060

Keywords

software, software asset management, software identification (SWID), software identification tag
Information technology, Cybersecurity and Internet of Things (IoT)

Citation

Waltermire, D. , Cheikes, B. , Feldman, L. and Witte, G. (2016), Guidelines for the Creation of Interoperable Software Identification (SWID) Tags, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8060 (Accessed December 14, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created April 22, 2016, Updated November 10, 2018