Copertina

Towards Robust Detection of Open Source Software Supply Chain Poisoning Attacks in Industry Environments

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Zheng, Xinyi, Wei, Chen, Wang, Shenao, Zhao, Yanjie, Gao, Peiming, Zhang, Yuanchao, Wang, Kailong, Wang, Haoyu
Natura:	Preprint
Pubblicazione:	2024
Soggetti:	Cryptography and Security Software Engineering
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

Models Are Codes: Towards Measuring Malicious Code Poisoning Attacks on Pre-trained Model Hubs
di: Zhao, Jian, et al.
Pubblicazione: (2024)

MiniScope: Automated UI Exploration and Privacy Inconsistency Detection of MiniApps via Two-phase Iterative Hybrid Analysis
di: Wang, Shenao, et al.
Pubblicazione: (2024)

"Elementary, My Dear Watson." Detecting Malicious Skills via Neuro-Symbolic Reasoning across Heterogeneous Artifacts
di: Wang, Shenao, et al.
Pubblicazione: (2026)

Patch2QL: Discover Cognate Defects in Open Source Software Supply Chain With Auto-generated Static Analysis Rules
di: Wang, Fuwei, et al.
Pubblicazione: (2024)

An Industry Interview Study of Software Signing for Supply Chain Security
di: Kalu, Kelechi G., et al.
Pubblicazione: (2024)

SoK: Understanding Vulnerabilities in the Large Language Model Supply Chain
di: Wang, Shenao, et al.
Pubblicazione: (2025)

ARMS: A Vision for Actor Reputation Metric Systems in the Open-Source Software Supply Chain
di: Kalu, Kelechi G., et al.
Pubblicazione: (2025)

Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
di: Reyes, Frank, et al.
Pubblicazione: (2024)

Dirty-Waters: Detecting Software Supply Chain Smells
di: Liu, Raphina, et al.
Pubblicazione: (2024)

Towards Predicting Multi-Vulnerability Attack Chains in Software Supply Chains from Software Bill of Materials Graphs
di: Baird, Laura, et al.
Pubblicazione: (2026)

GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
di: Cesarano, Carmine, et al.
Pubblicazione: (2025)

Wolves in the Repository: A Software Engineering Analysis of the XZ Utils Supply Chain Attack
di: Przymus, Piotr, et al.
Pubblicazione: (2025)

Evaluating Software Supply Chain Security in Research Software
di: Hegewald, Richard, et al.
Pubblicazione: (2025)

Operationalizing Research Software for Supply Chain Security
di: Kalu, Kelechi G., et al.
Pubblicazione: (2026)

Software Supply Chain Security of Web3
di: Monperrus, Martin
Pubblicazione: (2025)

QUT-DV25: A Dataset for Dynamic Analysis of Next-Gen Software Supply Chain Attacks
di: Mehedi, Sk Tanzir, et al.
Pubblicazione: (2025)

Unveiling the Landscape of LLM Deployment in the Wild: An Empirical Study
di: Hou, Xinyi, et al.
Pubblicazione: (2025)

Securing the Software Package Supply Chain for Critical Systems
di: Murali, Ritwik, et al.
Pubblicazione: (2025)

Decoding Secret Memorization in Code LLMs Through Token-Level Characterization
di: Nie, Yuqing, et al.
Pubblicazione: (2024)

"Your AI, My Shell": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors
di: Liu, Yue, et al.
Pubblicazione: (2025)

An Analysis of Malicious Packages in Open-Source Software in the Wild
di: Zhou, Xiaoyan, et al.
Pubblicazione: (2024)

Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning
di: Yan, Shenao, et al.
Pubblicazione: (2026)

Propagation-Based Vulnerability Impact Assessment for Software Supply Chains
di: Ruan, Bonan, et al.
Pubblicazione: (2025)

Software Bill of Materials in Software Supply Chain Security A Systematic Literature Review
di: O'Donoghue, Eric, et al.
Pubblicazione: (2025)

Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions
di: Hou, Xinyi, et al.
Pubblicazione: (2025)

Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management
di: Schmid, Larissa, et al.
Pubblicazione: (2026)

An Empirically Grounded Reference Architecture for Software Supply Chain Metadata Management
di: Tran, Nguyen Khoi, et al.
Pubblicazione: (2023)

LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?
di: Liu, Bin, et al.
Pubblicazione: (2025)

Detecting Stealthy Data Poisoning Attacks in AI Code Generators
di: Improta, Cristina
Pubblicazione: (2025)

Seeing is (Not) Believing: Practical Phishing Attacks Targeting Social Media Sharing Cards
di: Huang, Wangchenlu, et al.
Pubblicazione: (2024)

VulEval: Towards Repository-Level Evaluation of Software Vulnerability Detection
di: Wen, Xin-Cheng, et al.
Pubblicazione: (2024)

YASA: Scalable Multi-Language Taint Analysis on the Unified AST at Ant Group
di: Wang, Yayi, et al.
Pubblicazione: (2026)

Detecting Protracted Vulnerabilities in Open Source Projects
di: Sridharkumar, Arjun, et al.
Pubblicazione: (2026)

SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties
di: Okafor, Chinenye, et al.
Pubblicazione: (2024)

Large Language Model Supply Chain: A Research Agenda
di: Wang, Shenao, et al.
Pubblicazione: (2024)

A Large-scale Fine-grained Analysis of Packages in Open-Source Software Ecosystems
di: Zhou, Xiaoyan, et al.
Pubblicazione: (2024)

OmniBOR: A System for Automatic, Verifiable Artifact Resolution across Software Supply Chains
di: Seshadri, Bharathi, et al.
Pubblicazione: (2024)

CanCal: Towards Real-time and Lightweight Ransomware Detection and Response in Industrial Environments
di: Wang, Shenao, et al.
Pubblicazione: (2024)

RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement
di: Wang, Ziye, et al.
Pubblicazione: (2026)

Tracing Vulnerability Propagation Across Open Source Software Ecosystems
di: Ruohonen, Jukka, et al.
Pubblicazione: (2025)