Logo image
Back
Uncovering Software Supply Chains Vulnerability: A Review of Attack Vectors, Stakeholders, and Regulatory Frameworks
Conference proceeding   Peer reviewed

Uncovering Software Supply Chains Vulnerability: A Review of Attack Vectors, Stakeholders, and Regulatory Frameworks

Nafisa Anjum, Nazmus Sakib, Juanjose Rodriguez-Cardenas, Corey Brookins, Ava Norouzinia, Asia Shavers, Miranda Dominguez, Marie Nassif and Hossain Shahriar
2023 IEEE 47th Annual Computers, Software, and Applications Conference (COMPSAC), Vol.2023-, pp.1816-1821
Annual Computers, Software, and Applications Conference (COMPSAC), 47th (Torino, Italy, 06/26/2023–06/30/2023)
06/2023
DOI: https://doi.org/10.1109/COMPSAC57700.2023.00281
Web of Science ID: WOS:001046484100271

Metrics

1 Record Views
4 Times Cited - Web of Science

Abstract

Ransomware Attacks Regulatory frameworks Security Software Supply Chain Attacks Stakeholders cybercrime Cybersecurity
The proliferation of cyberattacks in the software supply chain (SSC) domain is a critical concern making them a formidable threat to software security and compromising its integrity and credibility which needs to be seriously acknowledged and investigated. This paper aims to conduct a comprehensive study of the various tactics and techniques employed by cybercriminals in this domain along with a focus on exploring the effect of software supply chain stakeholders' traits, limitations, and actions on the probability of a successful attack. Furthermore, this research also identifies the regulatory tools and protocols administrating software supply chains that support decreasing an organization's proneness to these challenges. Our study adopts a rigorous methodology to investigate the frequency of attacks, current defense techniques, and gaps combined with an overview highlighting where ransomware attacks occur amidst this discussion. The findings will provide valuable insights concerning the recent trends in disrupting the security and efficiency of the software supply chain and offer recommendations to researchers, organizations, and practitioners to remain cautious and proactive in their cybersecurity posture.

Details

Logo image