@misc{rfc9393, series = {Request for Comments}, number = 9393, howpublished = {RFC 9393}, publisher = {RFC Editor}, doi = {10.17487/RFC9393}, url = {https://www.rfc-editor.org/info/rfc9393}, author = {Henk Birkholz and Jessica Fitzgerald-McKay and Charles Schmidt and David Waltermire}, title = {{Concise Software Identification Tags}}, pagetotal = 61, year = 2023, month = jun, abstract = {ISO/IEC 19770-2:2015 Software Identification (SWID) tags provide an extensible XML-based structure to identify and describe individual software components, patches, and installation bundles. SWID tag representations can be too large for devices with network and storage constraints. This document defines a concise representation of SWID tags: Concise SWID (CoSWID) tags. CoSWID supports a set of semantics and features that are similar to those for SWID tags, as well as new semantics that allow CoSWIDs to describe additional types of information, all in a more memory-efficient format.}, }