Software supply-chain security: issues and countermeasures - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Computer Année : 2023

Software supply-chain security: issues and countermeasures

Résumé

Software application development is a complex activity which involves various actors and organizations in what is called the software supply chain. The evolution of the software supply chain led to numerous benefits such as profit maximization, code mutualization, and the optimization of lead times. However, the complexity of the software supply chain results in multiple security issues and attacks because compromises are highly prevalent. An attacker that compromises a single link (e.g., by maliciously modifying the software) in the software supply chain, can harm users of this software and this attack technique is frequently being exploited to attack high profile companies. We can provide a holistic and effective security solution to the software supply chain only if its security state and features are well understood. We discuss how we can achieve strong resilience of the software supply chain to cyberthreats. Next, we propose a holistic end-to-end security approach for the software supply chain.
Fichier principal
Vignette du fichier
main.pdf (835.17 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04400976 , version 1 (25-01-2024)

Identifiants

Citer

Badis Hammi, Sherali Zeadally. Software supply-chain security: issues and countermeasures. Computer, 2023, 56 (7), pp.54-66. ⟨10.1109/MC.2023.3273491⟩. ⟨hal-04400976⟩
7 Consultations
13 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More