Journey to the Center of Software Supply Chain Attacks - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Journal Articles IEEE Security and Privacy Magazine Year : 2023

Journey to the Center of Software Supply Chain Attacks

Abstract

This work discusses open-source software supply chain attacks and proposes a general taxonomy describing how attackers conduct them. We then provide a list of safeguards to mitigate such attacks. We present our tool "Risk Explorer for Software Supply Chains" to explore such information and we discuss its industrial use-cases.
Fichier principal
Vignette du fichier
2304.05200.pdf (1.33 Mo) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-04423786 , version 1 (29-01-2024)

Licence

Identifiers

Cite

Piergiorgio Ladisa, Serena Elisa Ponta, Antonino Sabetta, Matias Martinez, Olivier Barais. Journey to the Center of Software Supply Chain Attacks. IEEE Security and Privacy Magazine, 2023, 21 (6), pp.34-49. ⟨10.1109/MSEC.2023.3302066⟩. ⟨hal-04423786⟩
18 View
12 Download

Altmetric

Share

Gmail Mastodon Facebook X LinkedIn More