Journey to the Center of Software Supply Chain Attacks

Piergiorgio Ladisa,Serena Elisa Ponta,Antonino Sabetta,Matias Martinez,Olivier Barais

IEEE SECURITY & PRIVACY（2023）

引用 0|浏览23

暂无评分

摘要

This article discusses open source software supply chain attacks and proposes a general taxonomy describing how attackers conduct them. We then provide a list of safeguards to mitigate such attacks. We present our tool "Risk Explorer for Software Supply Chains" to explore such information, and we discuss its industrial use-cases.

查看译文

关键词

Supply chains,Software,Taxonomy,Security,Malware,Stakeholders,Codes

AI 理解论文

溯源树

样例

生成溯源树，研究论文发展脉络

Chat Paper

正在生成论文摘要