In episode 109 of the Cybersecurity Minute, I explore NetRise’s Trace, which offers a proactive approach to risk mitigation.
Highlights
00:26 — NetRise recently announced its new Trace capability. The reason this stood out to me is it uses an artificial-intelligence-powered semantic search capability, which enables users to identify and validate compromised and vulnerable third-party and proprietary software assets.
00:47 — Its intent-driven searches allow for natural language processing capabilities, so users can search their assets based on motives of malicious actors across code configurations. And rather than relying strictly on signatures or known vulnerabilities, often lagging indicators of risk, it can look at the intent of the malicious actor.
01:10 — Another neat feature allows the mapping of the relationships across your entire software supply chain. And often it can let you see potential lateral movements or cascading impacts across your software supply chain, your enterprise, your assets, your devices, etc.
01:29 — NetRise points out that Trace is the first offering that’s integrating this AI-driven semantic search for supply chain security analysis and vulnerability validation using large language models (LLMs).
