NNSP
PRODUCTS
nNetTrust
Automated Patch and Update Delivery Solution
Korea’s Only Physically Enforced Reverse-Unidirectional Transfer Solution
nNetTrust is a system composed of a Clean Server with a multi-vaccine engine, along with Ingestion (TX) and Delivery (RX) servers.
Based on a scalable transfer architecture, it inspects externally sourced data (files, updates, patches, and service streams) and securely delivers only verified content into internal networks.
A dedicated unidirectional hardware board ensures complete prevention of data exfiltration.
Based on a scalable transfer architecture, it inspects externally sourced data (files, updates, patches, and service streams) and securely delivers only verified content into internal networks.
A dedicated unidirectional hardware board ensures complete prevention of data exfiltration.
Security Functional
Certification
Certification
GS Certification
KC Certification
PPS
Preferred Product
Preferred Product
Korean Patent
New Software Product Award
Brochure
Key Advantages
What Makes nNetTrust Unique
Clean PC Policy Compliance with Multi-Vaccine Inspection
Ensures pattern updates without system modification while enforcing clean PC policies, using multi-engine scanning on a clean server to detect and block malware
Compliance with Security Management Policies in Secure Zones
Supports regulatory security policies that restrict security operations to designated secure transfer systems
Non-IP-Based Physically Enforced Reverse-Unidirectional Transfer
Enables real-time data streaming through non-IP-based reverse-unidirectional transfer while fundamentally preventing data exfiltration from internal networks
Need and Impact of Deployment
Evolution of Domestic Security Policies
(Security Policies and Guidelines)
(Security Policies and Guidelines)
Manual delivery of patch and update files via CD/DVD and USB in critical information infrastructure is being replaced by automated transfer using reverse-unidirectional systems to reduce security gaps.
By leveraging unidirectional transfer systems with built-in clean environments, patch and update files can be delivered automatically in real time, improving security compliance and operational efficiency.
In addition, physically enforced one-way data transfer fundamentally prevents internal data exfiltration.
By leveraging unidirectional transfer systems with built-in clean environments, patch and update files can be delivered automatically in real time, improving security compliance and operational efficiency.
In addition, physically enforced one-way data transfer fundamentally prevents internal data exfiltration.
Deployment Scenarios
nNetTrust Deployment Areas
All PCs and servers related to critical infrastructure are recommended to install antivirus and patch management programs and maintain up-to-date status with regular updates at least once per month. Accordingly, critical information infrastructure and various institutions are adopting reverse-unidirectional transfer systems to minimize security gaps.
- Collects patch and update files from external vendors
- Scans collected files for malware
- Delivers only verified data to internal networks (mitigates zero-day risks)
Organization A
(Public Sector)
(Public Sector)
- Manually downloads development files from the Internet
- Performs integrity and malware inspection within a clean environment
Organization B
(Research Institute)
(Research Institute)
- Automated transfer of patch and update files
- Provides additional policy configuration and scheduling features (customized)
Organization C
(Financial Sector)
(Financial Sector)
nNetTrust Deployment Case 1
Organization O (Public Sector)
Establishing a “Verification-First” Standard for Patch Ingestion in Air-Gapped Environments with nNetTrust
“Patches are never transferred immediately. Only verified files are delivered internally.” nNetTrust enforces this principle through system architecture, not just operational policy.
Challenges Before Deployment
“Not applying patches is risky—but applying them hastily is even riskier.
The key question was whether we could verify everything before bringing it inside.”
– Security Lead, Organization O
The patch ingestion process itself becomes an attack surface
The key question was whether we could verify everything before bringing it inside.”
– Security Lead, Organization O
The patch ingestion process itself becomes an attack surface
- Supply Chain Risk Even vendor-provided update files may be tampered with or contain malware during distribution
- Increased Operational Burden Manual processes for collection, transfer, verification, and deployment accumulate over time
- Patch Gaps Delays in ingestion and verification lead to missed patch timing
- Limited Traceability and Audit Readiness Difficulty in explaining when, what, and how files were ingested and validated
Deployment Benefits
- Enhanced Supply Chain Security Establishes a verification gate in the patch ingestion path to block malicious and tampered files
- Network Segmentation Compliance and Automation Automates standardized processes for collection, verification, transfer, and deployment without direct Internet exposure
- Improved Operational Efficiency and Stability Reduces repetitive tasks and minimizes deployment delays through centralized handling of large-scale patches
- Auditability and Traceability Provides clear tracking and reporting across each stage for accountability and compliance
Case
Summary
Summary
Transforms patch ingestion from an “unavoidable risk” into a “controllable and verifiable supply chain process.”
In the era of software supply chain security, updates are no longer simple IT operations. They are a critical control point for protecting internal networks—and a primary target for attackers.
nNetTrust shifts patch ingestion from transfer to verification, enabling secure and efficient patch operations even in air-gapped environments.
nNetTrust shifts patch ingestion from transfer to verification, enabling secure and efficient patch operations even in air-gapped environments.
nNetTrust Deployment Case 2
Organization O (Research Institute)
Fast Open Source Adoption, Strict Ingestion Control
– Governing open source ingestion in development environments with nNetTrust
Challenges Before Deployment
“Open source is essential for development, but the moment external files enter the development network is the most vulnerable point.
We needed a structure that allows only verified content—not simply blocking ingestion.”– Security Lead, Organization O
Limitations of existing environments: the dilemma of open source ingestion
We needed a structure that allows only verified content—not simply blocking ingestion.”– Security Lead, Organization O
Limitations of existing environments: the dilemma of open source ingestion
- Open Source as a Supply Chain Attack Vector Even legitimate libraries can be tampered with or injected with malicious code during distribution
- Unclear Ingestion Procedures in Segmented Development Networks Ambiguous processes lead to bypass ingestion under urgency
- Difficulty in Incident Response and Accountability Without proper logs of who, what, and why files were ingested, audit and responsibility tracking become difficult
- Conflict Between Security and Productivity Overly strict procedures slow development, leading to increased attempts to bypass controls
Dependency chain attacks can impact final deliverables
Lack of standardization due to variations by personnel and situations
Deployment Benefits
Transforming Open Source Ingestion from “Risk” to a “Controlled Standard”
- Strengthened Software Supply Chain Security Converts open source ingestion from an attack surface into a controlled security checkpoint
- Balanced Security and Development Productivity Enables ingestion through standardized processes instead of unconditional blocking, reducing bypass attempts
- Enhanced Traceability and Audit Readiness Provides end-to-end tracking from file registration to delivery, enabling clear accountability of “what, why, and how”
- Improved Incident Response and Prevention Step-by-step separation enables faster root cause analysis and continuous improvement
Case
Summary
Summary
nNetTrust transforms open source ingestion from a matter of “allow vs. block” into a structured process of verification and control.
Open source is the fuel of development.
However, in security-critical environments, it is also one of the most realistic supply chain attack vectors.
Organization O no longer relied on individual developer judgment for open source ingestion.
Instead, nNetTrust established an automated workflow of verification, approval, inspection, and delivery.
However, in security-critical environments, it is also one of the most realistic supply chain attack vectors.
Organization O no longer relied on individual developer judgment for open source ingestion.
Instead, nNetTrust established an automated workflow of verification, approval, inspection, and delivery.
Differentiators
Korea’s Only Reverse-Unidirectional Data Transfer Solution
- Blocks reverse data transmission from internal to external networks
- The only domestic solution certified for security functionality
Compliance with Security Management Policies in Secure Zones
- Verifies patch and update files on a clean PC before transfer
- Ensures compliance with security management policies in secure environments
Flexible Integration with 3rd Party Solutions
- Integrates with multi-vaccine, CDR, and other security solutions for advanced threat response
- Provides interfaces for seamless 3rd party integration
Product Overview Video
