2024.08.20. The Fair Economy — Labrador Labs (co-CEOs Kim Jin-seok and Lee Hui-jo) recently announced the launch of 'Labrador SCM', an automated software supply chain management platform.
According to Labrador Labs, the entire process of generating, sending, receiving, cross-checking, and revising SBOMs for all companies involved in the software supply chain is automated within 'Labrador SCM'.
With the product launch, Labrador Labs announced that global manufacturing conglomerates and medical device companies have begun adopting 'Labrador SCM' to respond to global software supply chain regulations.
Labrador SCM resolves the difficulties of generating and managing SBOMs among software partners.
Final manufacturers and their partners exchange standardized SBOMs through Labrador SCM. Once a company uploads an SBOM for a specific product to Labrador SCM and clicks share, the latest SBOM is automatically delivered to its partners. This reduces the threat of confidential data exposure and simplifies version control.
Labrador SCM connects manufacturers (hub companies) with software partner companies.
Hub companies can manage partner SBOMs in one stop through Labrador SCM, enhancing software security and responding to SBOM regulatory issues in various countries.
Labrador SCM generates SBOMs using hash-encrypted data for source code privacy. It verifies SBOM integrity before secure exchange.
It supports SBOM formats that are easy for users to understand, such as Cyclone-DX, SPDX, NIS-SBOM, and Excel. This makes it easy to identify software license and vulnerability issues and to check results.
Labrador SCM allows companies to receive differentiated usage license scopes based on their characteristics at each stage of the software supply chain.
Small software partners (suppliers) often lack the personnel and resources to generate or manage SBOMs. Labrador Labs also provides a 'Software Composition Analysis (SCA)' solution, a tool that removes open-source vulnerability and license compliance risks for these partners.
80% of commercial software is composed of open source. In addition to license violations, unpatched security vulnerabilities can lead to hacking attacks on products. If critical CVE vulnerabilities remain unpatched, regulatory certification may be rejected. Using SCA strengthens not only software transparency but also security management.
Partners can use SCA to inspect their software, generate an SBOM, and share it with manufacturers via Labrador SCM.
Kim Jin-seok, CEO of Labrador Labs, said, "Labrador SCM is a groundbreaking service that not only checks for vulnerabilities in advance during the software distribution process and supplements them with safe software, but also improves work inefficiencies caused by manually creating and exchanging SBOMs."
0 Comments
No comments yet.