Binarly, a leading firmware and software supply chain security company, today announced that it has been awarded U.S. Patent No. 12153686 for the invention of an innovative method for creating Cryptography Bills of Materials (CBOM) from executable binaries.
The invention underscores Binarly’s commitment to deep engineering innovation to address security risks in the supply chain of modern computer systems. By combining program analysis and machine learning, the patented technology enables companies to identify cryptographic primitives embedded in software, providing actionable insights into potential security vulnerabilities – without requiring access to the source code.
“As companies strive to secure their software supply chains, understanding cryptographic dependencies has become more important than ever,” said Alexander Matrosov, CEO and one of the listed inventors of the patented technology. “This innovation enables teams to better manage risk and prepare for a quantum-safe future.”
The patented method includes the following:
- Identification of cryptographic primitives through similarity and cross-reference analyses.
- Performing a call site analysis to detect cryptographic algorithm parameters.
- Creation of detailed CBOM highlighting the cryptographic assets, their dependencies and their usage.
Also Read: Exploring the Cyber Security Risks of Digital Marketing
The patent underscores Binarly’s focus on delivering scalable solutions that align with emerging cybersecurity frameworks, including Zero Trust architecture and Quantum Readiness.
Binarly’s CBOM technology is poised to redefine crypto asset discovery and management by enabling:
- Improved transparency: clear identification of cryptographic assets in software packages.
- Improved compliance: Alignment with NIST standards for secure cryptographic techniques.
- Proactive risk mitigation: actionable insights to reduce cryptographic vulnerabilities.
The patented innovation is an integral part of Binarly’s mission to deliver cutting-edge solutions for firmware security, software supply chain risk management and enterprise cybersecurity.
For more such updates follow us on Google News ITsecuritywire News. Please subscribe to our Newsletter for more updates.
