Since November, the information and communication software supply chain security community has carried out the "Software Supply Chain Outstanding Achievement Cases" solicitation and review activity. In the results announcement on December 16, the Murphy Security Software Supply Chain Security Management Platform was successfully selected for independent research and development innovation results. This is the recognition of Murphy Security's long-term focus on software supply chain security. We will also strengthen industry technology exchanges and sharing, continue to launch excellent products and practical results, and help the high-quality development of my country's software supply chain security governance.
Murphy Security Software Supply Chain Security Management Platform
Murphy's supply chain security series products use multi-dimensional asset scanning to deeply identify external dependencies used in assets, combined with a complete, accurate, and fast risk knowledge base, accurately identify vulnerability risks and open source license risks, and provide professional and convenient The risk recovery plan helps enterprises efficiently manage supply chain security risks.
In terms of overall solutions, Murphy Security will help customers establish a complete set of software supply chain security governance framework, from the management system and control system to help customers establish a software supply chain security system from top to bottom, and solve open source components, open source software and closed source software. security risks .
Beforehand : Mainly focus on prevention, and check and detect components and codes when introducing components and writing codes.
In-progress : Mainly focus on disposal, scan the project during the compilation and deployment stages, and prevent the project from carrying risks to go online through the card position method.
Afterwards : Mainly focus on emergency response, carry out risk warning for projects that have been launched, and stop losses in time when risky software is found.
To complete the control system, Murphy Security provides support for various basic technical capabilities, including: private source management, asset inventory, vulnerability detection, vulnerability repair, etc.
About Murphy Security
Murphy Security is a technology company that provides you with professional software supply chain security management. The core team comes from Baidu, Huawei, Wuyun and other enterprises. The company provides customers with a complete software supply chain security management platform, and provides software with a full life cycle around SBOM Security management, platform capabilities include software component analysis, source security management, container image detection, vulnerability intelligence early warning and commercial software supply chain access assessment and other products. Provide customers with complete control capabilities from supply chain asset identification management, risk detection, security control, and one-click repair. At the same time, the product can be integrated with various tools in the existing development process at a very low cost, including seamless integration of dozens of tools such as IDE, Gitlab, Bitbucket, Jenkins, Harbor, and Nexus.
> WeChat official account search "Murphy Security", follow us ➕
Redis 7.2.0 was released, the most far-reaching version Chinese programmers refused to write gambling programs, 14 teeth were pulled out, and 88% of the whole body was damaged. Flutter 3.13 was released. System Initiative announced that all its software would be open source. The first large-scale independent App appeared , Grace changed its name to "Doubao" Spring 6.1 is compatible with virtual threads and JDK 21 Linux tablet StarLite 5: default Ubuntu, 12.5-inch Chrome 116 officially released Red Hat redeployed desktop Linux development, the main developer was transferred away Kubernetes 1.28 officially released