Asking for help regarding the use of SBOMs


dmg <dmg@...>
 

Dear Open Chain Community,

Over the years we have been involved in several empirical studies
regarding open source licensing. Some of you might have already seen
some of our papers:

https://github.com/dmgerman/papers/#intellectual-property

We are kindly requesting your help by answering a survey. We are
trying to understand the major challenges that the Open Source Supply
Chain software community has regarding SBOMs. We hope that our work
highlights the current state of the art in this area and helps guide
future developments (by both research and industry).

Please see the formal invitation below. A big thank you in advance,

--
daniel german
professor computer science
University of Victoria
Canada
dmg@...
dmg@...

------------------------------


Dear OpenChain Community,

The SEMERU research lab from William and Mary is conducting an online
survey to understand issues, needs, and opportunities related to
software
supply chain management through Software Bill of Materials (SBOMs).

If you have knowledge of or experience with SPDX or other SBOM
formats, we would value your participation in this study.

We would greatly appreciate 20-30 minutes of your time to complete the survey:

https://wmsas.qualtrics.com/jfe/form/SV_cO4qm1gk3AFunJk

If you decide to participate, we kindly ask you to complete the
survey as soon as possible, ideally within a week. Participating will
enter you into a
lottery to win one of 10 $50 Amazon gift cards.

Your participation will help us in our mission to better understand
the current state of SBOMs in practice and help us provide better
resources
and tools to developers for managing and securing their own software
supply chains.

If you have any questions about our research, our methods, or our
survey please do not hesitate to ask. If you have any colleagues who
you
believe may have valuable domain knowledge and experience, please
forward this email and survey to them.

This research is conducted under protocol PHSC-2022-07-14-15722
approved by the IRB at William and Mary.

Thank you for your time,

Oscar Chaparro - Assistant Professor (oscarch@...)

Denys Poshyvanyk - Professor (dposhyvanyk@...)

Trevor Stalnaker - Ph.D. student (twstalnaker@...)

Nathan Wintersgill - Ph.D. student (njwintersgill@...)

Daniel German - Professor (dmg@...)

---
D M German
http://turingmachine.org