An analysis of secure software delivery validation using blockchain

Due to a lack of security in the supply chain of the software delivery process, the proposed method aims to address the challenges encountered during software delivery and mitigate the attack surface of software supply chain attacks. Blockchain technology establishes trust by verifying software packages and their developers, thereby achieving this goal, reducing the risk of executing malicious or compromised software. The proof of security is rooted in the immutable nature of blockchain. This feature provides a tamperproof record of software developers and the packages they publish, instilling a high level of trust in the verification process. The system holds the promise of a future where organisations can confidently verify the identity of software developers, allowing them to trust only the software from vendors they trust. When a tampered package enters the delivery process, the installation checks will promptly detect the compromise, leading to the failure of the attack chain.