2024.08.06. The Fair Economy — Application security firm Sparrow (CEO Jang Il-su) recently announced the launch of 'Sparrow Cloud 2.0', a software-as-a-service (SaaS)-based application security vulnerability analysis solution.
According to Sparrow, the new Sparrow Cloud adds a software composition analysis (SCA) service covering open source, among other things, enabling software supply chain management using a software bill of materials (SBOM).
The Ministry of Science and ICT and Kisa identified software supply chain attacks as a major cyber threat this year in their '2023 Cyber Security Threat Analysis and 2024 Cyber Security Threat Outlook'.
In fact, in May the government released the 'SW Supply Chain Security Guidelines v1.0,' emphasizing the use of SBOMs to ensure software reliability.
In response, Sparrow added an SCA service to Sparrow Cloud, a cloud-based security service that can simultaneously analyze static application security testing (SAST) for identifying security weaknesses in source code and dynamic application security testing (DAST) for checking web vulnerabilities and more.
This allows companies to identify code flaws in advance and continuously monitor vulnerabilities, improving quality throughout the software development and deployment process. It also enables supply chain risk management through SBOMs, which make software components visible.
It also enables compliance with software supply chain security guidelines: software development companies can identify the open-source licenses they use, detect vulnerability information for that source code, and automatically generate SBOMs. Software operating companies, meanwhile, can use SBOMs to verify software components and continuously manage vulnerabilities and licenses. Sparrow Cloud also plans to offer an online vulnerability assessment consulting service in the second half of the year.
Sparrow is overhauling its pricing policy and running promotions so that companies with limited security budgets can manage vulnerabilities in an integrated way at a reasonable cost. First, customers who take out an annual subscription to SAST and DAST by October can use the SCA service for free. Even after the promotion ends, under the revised pricing policy, customers who subscribe to SAST, DAST and SCA together will receive a 15% annual discount.
"The global IT outage last month, caused by a flawed product update from U.S. cybersecurity giant CrowdStrike, clearly revealed the importance of supply chain management," said Sparrow CEO Jang Il-su. "We will continue to update the Sparrow Cloud service to ensure software reliability and transparency across the entire supply chain, including development, supply and operation."
0 Comments
No comments yet.