Code for the paper by Logan Kostick (Johns Hopkins University), Michael Rushanan (Harbor Labs), and Tushar M. Jois (City College of New York)
The deidentify/ directory contains our SBOM anonymization script.
The sboms/ directory contains the SBOMs from our case study.
We welcome SBOM contributions from the community to help the study of medical device security. If you have an (anonymized) SBOM you are willing to share, create a pull request to this repository adding it to the sboms/ directory under a new directory.