SecuriOT ApS

You shouldn’t have to choose the between two good things… come back July 17th for the announcement of our new secure by design remote access solution.

For 40 years now, we have automated physical operations with computers in the name of increased efficiencies – deploying ever more targets for cyber attacks. Board members need to stop asking “have we got this covered?” and start asking more specific questions.

It has been some time since I have shared some of the features released in the NetRise Platform. Certainly not because there has been little feature development, quite the opposite. Some of the releases we made a few months ago allowed us to hit an even more impressive stride in terms of pushing code into production. We are deploying to production once a week currently and these are not simple bug fix pushes to production. The feature I want to cover in this post is the Enhanced Asset Extraction and Analysis feature. Prior to digging into this, I would like to highlight why this matters so much, even though it might seem obvious. From what we have seen in the market, the vast majority of technologies are not able to extract all aspects of the filesystem(s) and so by definition cannot hope to identify the components within those filesystems that they cannot extract. This is one of the massive shortcomings of all of the open source tooling that claims to do anything meaningful for people looking to actually address the problems related to software transparency. Many folks might think this is a straightforward capability, and that of course you should be extracting out all of the files within all of the filesystems. There are many unique challenges depending on if you are talking about firmware, full blown embedded operating systems, containers, linux disk images, standalone windows executables or windows full operating system disk images. The long tail of this problem is extraordinary, so being able to develop a capability that can support all of this and be performant was a monumental task. Once you do extract everything out perfectly, you have now created a massive data problem for yourself. This is highlighted by the examples below showing the difference in number of files identified before and after this set of capabilities was deployed. Parsing through all of this data, analyzing it and then enriching it at scale also forced us to make significant changes to our cloud infrastructure which customers have been enjoying for months. Why does this matter? These changes ultimately result in significantly more extracted files, a more complete SBOM, and a more detailed picture of risk in Assets. These enhancements coupled with cloud service infrastructure improvements also results in reduced analysis time for Assets of all sizes. A few examples: Top 5 Network Switch: Old Extraction Engine - 47,368 files; New Extraction Engine - 126,841 files Top 5 ICS PLC: Old Extraction Engine - 1,486 files; New Extraction Engine - 2,319 files Top 5 Modem: Old Extraction Engine - 2,259 files; New Extraction Engine - 5,576 files One last example I want to share is where previously we found one log4j component in a very popular networking device, now we find 22. Of those 22, 5 are known to have exploitable CVEs. Just like we need to know what assets we have in our environment, we also need to know what software exists. Visibility is possible.

Heading to RSAC ? Meet NetRise at the Squadra Ventures Hub on Tuesday, May 7. Squadra Ventures is hosting a daylong event and meeting space at Oren’s Hummus, just a block from the Moscone Center. We’re excited for the keynote featuring National Cyber Director Harry Coker, and the opportunity to network with the innovation community. Want to meet us at the Hub? We’ll be on hand to discuss: ☑ XIoT and software supply chain security ☑ The benefits of visibility into the firmware and underlying software components of connected devices ☑ How enterprise organizations are operationalizing SBOM and addressing critical supply chain risk Submit your RSVP here: https://lu.ma/rsa-squadra #RSA #RSAC #SupplyChainSecurity #SBOM #NetRise