OPSWAT Unveils Supply Chain Security Platform for N²SF Transition
The integrated platform links development-time software verification with managed file transfer and cross-domain data movement, Insec Security said.
OPSWAT has unveiled an integrated software supply chain security platform aimed at helping organizations respond to the N²SF transition, according to its Korean distributor Insec Security.
The platform links security verification across software development and distribution through to work file transfer and data movement between networks of different security levels.
MetaDefender Software Supply Chain inspects source code, external components, repositories and containers during development, build and distribution. Its features include software composition analysis, multi-engine malware scanning, vulnerability assessment, SBOM generation, secret detection and license checks. SBOM supports standard formats such as SPDX and CycloneDX.
MetaDefender Managed File Transfer inspects files for malware, vulnerabilities and sensitive information before sending them and applies transfer policies. It uses multi-engine scanning, content disarm and reconstruction, DLP and sandbox analysis, and checks that file extensions match actual file types, including archive contents.
For data movement between networks with different security levels, the platform uses cross domain solutions and data diodes. Data diodes restrict transfer direction via hardware and block reverse connections, and combined with MetaDefender file inspection also check the risk of transferred files.
Quick answers
What does OPSWAT's new platform cover?
It links security verification from software development and distribution through work file transfer and data movement between networks of different security levels.
What does MetaDefender Managed File Transfer check?
It inspects files for malware, vulnerabilities and sensitive information before sending them, applies transfer policies, and checks file extension and actual type matching including archive contents.
How is data moved between networks of different security levels?
Cross domain solutions and data diodes are used, with data diodes restricting transfer direction via hardware and blocking reverse connections.