Copertina

OmniBOR: A System for Automatic, Verifiable Artifact Resolution across Software Supply Chains

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Seshadri, Bharathi, Han, Yongkui, Olson, Chris, Pollak, David, Tomasevic, Vojislav
Natura:	Preprint
Pubblicazione:	2024
Soggetti:	Software Engineering Cryptography and Security
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

Verifiable Provenance of Software Artifacts with Zero-Knowledge Compilation
di: Ron, Javier, et al.
Pubblicazione: (2026)

Securing the Software Package Supply Chain for Critical Systems
di: Murali, Ritwik, et al.
Pubblicazione: (2025)

Evaluating Software Supply Chain Security in Research Software
di: Hegewald, Richard, et al.
Pubblicazione: (2025)

Operationalizing Research Software for Supply Chain Security
di: Kalu, Kelechi G., et al.
Pubblicazione: (2026)

Software Supply Chain Security of Web3
di: Monperrus, Martin
Pubblicazione: (2025)

Dirty-Waters: Detecting Software Supply Chain Smells
di: Liu, Raphina, et al.
Pubblicazione: (2024)

An Industry Interview Study of Software Signing for Supply Chain Security
di: Kalu, Kelechi G., et al.
Pubblicazione: (2024)

Propagation-Based Vulnerability Impact Assessment for Software Supply Chains
di: Ruan, Bonan, et al.
Pubblicazione: (2025)

Software Bill of Materials in Software Supply Chain Security A Systematic Literature Review
di: O'Donoghue, Eric, et al.
Pubblicazione: (2025)

ARMS: A Vision for Actor Reputation Metric Systems in the Open-Source Software Supply Chain
di: Kalu, Kelechi G., et al.
Pubblicazione: (2025)

Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
di: Reyes, Frank, et al.
Pubblicazione: (2024)

Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management
di: Schmid, Larissa, et al.
Pubblicazione: (2026)

An Empirically Grounded Reference Architecture for Software Supply Chain Metadata Management
di: Tran, Nguyen Khoi, et al.
Pubblicazione: (2023)

SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties
di: Okafor, Chinenye, et al.
Pubblicazione: (2024)

GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
di: Cesarano, Carmine, et al.
Pubblicazione: (2025)

Wolves in the Repository: A Software Engineering Analysis of the XZ Utils Supply Chain Attack
di: Przymus, Piotr, et al.
Pubblicazione: (2025)

Towards Robust Detection of Open Source Software Supply Chain Poisoning Attacks in Industry Environments
di: Zheng, Xinyi, et al.
Pubblicazione: (2024)

QUT-DV25: A Dataset for Dynamic Analysis of Next-Gen Software Supply Chain Attacks
di: Mehedi, Sk Tanzir, et al.
Pubblicazione: (2025)

Towards Predicting Multi-Vulnerability Attack Chains in Software Supply Chains from Software Bill of Materials Graphs
di: Baird, Laura, et al.
Pubblicazione: (2026)

Patch2QL: Discover Cognate Defects in Open Source Software Supply Chain With Auto-generated Static Analysis Rules
di: Wang, Fuwei, et al.
Pubblicazione: (2024)

Understanding the Supply Chain and Risks of Large Language Model Applications
di: Ma, Yujie, et al.
Pubblicazione: (2025)

RiskHarvester: A Risk-based Tool to Prioritize Secret Removal Efforts in Software Artifacts
di: Basak, Setu Kumar, et al.
Pubblicazione: (2025)

AssetHarvester: A Static Analysis Tool for Detecting Secret-Asset Pairs in Software Artifacts
di: Basak, Setu Kumar, et al.
Pubblicazione: (2024)

Exploiting LLM Agent Supply Chains via Payload-less Skills
di: Liu, Xinyu, et al.
Pubblicazione: (2026)

DiVerify: Hardening Identity-Based Software Signing with Diverse-Context Scopes
di: Okafor, Chinenye, et al.
Pubblicazione: (2024)

SBOMproof: Beyond Alleged SBOM Compliance for Supply Chain Security of Container Images
di: Bufalino, Jacopo, et al.
Pubblicazione: (2025)

Automatic Selection of Protections to Mitigate Risks Against Software Applications
di: Canavese, Daniele, et al.
Pubblicazione: (2025)

"Elementary, My Dear Watson." Detecting Malicious Skills via Neuro-Symbolic Reasoning across Heterogeneous Artifacts
di: Wang, Shenao, et al.
Pubblicazione: (2026)

How Can ChatGPT Support Human Security Testers to Help Mitigate Supply Chain Attacks?
di: Zhang, Ying, et al.
Pubblicazione: (2023)

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks
di: He, Hao, et al.
Pubblicazione: (2025)

A Universal System for OpenID Connect Sign-ins with Verifiable Credentials and Cross-Device Flow
di: Hoops, Felix, et al.
Pubblicazione: (2024)

Bomfather: An eBPF-based Kernel-level Monitoring Framework for Accurate Identification of Unknown, Unused, and Dynamically Loaded Dependencies in Modern Software Supply Chains
di: Srinivasan, Naveen, et al.
Pubblicazione: (2025)

Closing the Chain: How to reduce your risk of being SolarWinds, Log4j, or XZ Utils
di: Hamer, Sivana, et al.
Pubblicazione: (2025)

Identifying the Supply Chain of AI for Trustworthiness and Risk Management in Critical Applications
di: Sheh, Raymond K., et al.
Pubblicazione: (2025)

Servicifying zk-SNARKs Execution for Verifiable Off-chain Computations
di: Domenech, Alvaro Alonso, et al.
Pubblicazione: (2024)

Software Security in Software-Defined Networking: A Systematic Literature Review
di: Diouf, Moustapha Awwalou, et al.
Pubblicazione: (2025)

Large Language Model Supply Chain: Open Problems From the Security Perspective
di: Hu, Qiang, et al.
Pubblicazione: (2024)

DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems
di: Yang, Rui, et al.
Pubblicazione: (2025)

Expert-in-the-Loop Systems with Cross-Domain and In-Domain Few-Shot Learning for Software Vulnerability Detection
di: Farr, David, et al.
Pubblicazione: (2025)

Challenges in Developing Secure Software -- Results of an Interview Study in the German Software Industry
di: Mattukat, Alex R., et al.
Pubblicazione: (2025)