{
  "draft": "draft-ietf-sacm-coswid-24",
  "doc_id": "RFC9393",
  "title": "Concise Software Identification Tags",
  "authors": [
    "H. Birkholz",
    "J. Fitzgerald-McKay",
    "C. Schmidt",
    "D. Waltermire"
  ],
  "format": [
    "XML",
    "TEXT",
    "HTML",
    "PDF"
  ],
  "page_count": "61",
  "pub_status": "PROPOSED STANDARD",
  "status": "PROPOSED STANDARD",
  "source": "Security Automation and Continuous Monitoring",
  "abstract": "ISO/IEC 19770-2:2015 Software Identification (SWID) tags provide an extensible XML-based structure to identify and describe individual software components, patches, and installation bundles.  SWID tag representations can be too large for devices with network and storage constraints.  This document defines a concise representation of SWID tags: Concise SWID (CoSWID) tags.  CoSWID supports a set of semantics and features that are similar to those for SWID tags, as well as new semantics that allow CoSWIDs to describe additional types of information, all in a more memory-efficient format.",
  "pub_date": "June 2023",
  "keywords": [],
  "obsoletes": [],
  "obsoleted_by": [],
  "updates": [],
  "updated_by": [],
  "see_also": [],
  "doi": "10.17487/RFC9393",
  "errata_url": null
}