Ensuring the Integrity of the Software Supply Chain
Ensuring the Integrity of the Software Supply Chain
5 PagesThis position paper addresses the growing risk of software supply chain attacks, where malicious code is inserted into legitimate software during development. These attacks are particularly dangerous because the malware becomes part of official software distributions, making it difficult to detect. The paper explains how traditional detection methods fail to identify such “innocuous” code and highlights the need for improved detection at the source—within development environments. By implementing detection systems capable of identifying unauthorized changes, organizations can prevent malicious code from being embedded into software before it is distributed.
