AI SBOM

An AI Software Bill of Materials (SBOM) is a structured inventory documenting the components, dependencies, and datasets used to build and deploy an AI system. For enterprise governance, AI SBOMs enable organizations to track model lineage, identify supply chain risks, assess licensing compliance, and maintain transparency about third-party components embedded in AI applications. This transparency becomes increasingly critical as regulators like the EU and NIST require organizations to demonstrate knowledge of their AI systems' composition and potential vulnerabilities.

1 item

ResearchGlobal2026-08-28

Country-of-Origin Labels on AI Models Are Not Reliable, Cisco Research Finds

Cisco and the Vulnerability and Adversarial Intelligence Lab (VAIL) published research showing that fine-tuned AI models can retain detectable behavioral fingerprints from their upstream base models, even when marketed under a different country of origin. The researchers demonstrated this using model fingerprinting tools on Nvidia Nemotron models built on Qwen base weights, finding traceable similarities to Qwen despite Nemotron's US-origin labeling. The paper calls for model bills of materials, routine lineage disclosure by developers, and more rigorous due diligence from enterprises and regulators.

Cisco VAIL Qwen Nemotron model provenance AI supply chain AI SBOM procurement due diligence