Answers are grounded in this paper and cite their sources.
Article demonstrates a comprehensive taxonomy of software supply chain attacks, suggesting safeguards for enhancement in industry security.
This article discusses open source software supply chain attacks and proposes a general taxonomy describing how attackers conduct them. We then provide a list of safeguards to mitigate such attacks. We present our tool Risk Explorer for Software Supply Chains to explore such information, and we discuss its industrial use-cases.
No takes yet. Share an insight, caveat, or question.
Ladisa et al. (2023) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: