Protection Mechanism against Software Supply Chain Attacks through Blockchain

Abstract

Software supply chain attack is exceptionally fatal, overwhelmingly rapid, and almost effortless on the part of the attacker. A single compromise or hack can lead to multiple businesses sufferings because suppliers and providers have a vast user network. Protection against software supply chain attacks is being achieved through some outdated concepts like honeytokens and privileged pathway, but an integrated and proper mechanism is still lacking. In recent years, blockchain technology represents a fundamental shift that can replace conventional business models that rely on third parties for trust. This paper proposes a protection mechanism through validity concept with the implementation of blockchain to retain an immutable and trustworthy record of propagating payload (i.e., official update) that is transmitted across the supply chain systems. Blockchain can be used to circumvent these supply chain attacks by keeping a digital log of all propagating information. Each block contains the information regarding validity of propagating data, based on this an official update can be accepted or rejected.