Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses最新文献_第2页

Talking Trojan: Analyzing an Industry-Wide Disclosure 会说话的木马:分析一个全行业的信息披露

Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses Pub Date : 2022-09-22 DOI: 10.1145/3560835.3564555

Nicholas Boucher, Ross J. Anderson

引用次数: 2

Automatic Security Assessment of GitHub Actions Workflows GitHub动作工作流的自动安全评估

Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses Pub Date : 2022-08-07 DOI: 10.1145/3560835.3564554

Giacomo Benedetti, Luca Verderame, A. Merlo

引用次数: 10

Preventing or Mitigating Adversarial Supply Chain Attacks: A Legal Analysis 预防或减轻对抗性供应链攻击:法律分析

Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses Pub Date : 2022-08-06 DOI: 10.1145/3560835.3564552

K. Ludvigsen, Shishir Nagaraja, A. Daly

{"title":"Preventing or Mitigating Adversarial Supply Chain Attacks: A Legal Analysis","authors":"K. Ludvigsen, Shishir Nagaraja, A. Daly","doi":"10.1145/3560835.3564552","DOIUrl":"https://doi.org/10.1145/3560835.3564552","url":null,"abstract":"The world is currently strongly connected through both the internet at large, but also the very supply chains which provide everything from food to infrastructure and technology. The supply chains are themselves vulnerable to adversarial attacks, both in a digital and physical sense, which can disrupt or at worst destroy them. In this paper, we take a look at two examples of such successful attacks to put the idea of Supply Chain Attacks into perspective, and analyse how EU and national law can prevent these attacks or otherwise punish companies which do not try to mitigate them at all possible costs. We find that the current types of national regulation are not technology specific enough, and cannot force or otherwise mandate the correct parties who could play the biggest role in preventing supply chain attacks to do everything in their power to mitigate them. But, current EU law is on the right path, and further textcolorblack development of this may be what is necessary to combat these large threats, as national law may fail at properly regulating companies when it comes to cybersecurity.","PeriodicalId":208151,"journal":{"name":"Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses","volume":"80 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132274685","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses 2022年ACM软件供应链进攻研究和生态系统防御研讨会论文集

Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses Pub Date : 1900-01-01 DOI: 10.1145/3560835

引用次数: 0