Is a Secure Software Supply Chain Even Possible, Let Alone Feasible?
summary
Examines software supply chain security by arguing that the linear "chain" metaphor is flawed and proposing a "web" model instead. Compares software practices to other industries and outlines a blended approach using standards, targeted testing, and enforcement to improve developer practices.
AI-written summary · about
chapters (6)
- 0:00Start
- 4:50The Control Model of Security
- 5:42Why Do We Have Complicated Supply Chains
- 8:53Malicious Supplier
- 12:02Unauthorized Modification
- 20:34The Secure Software Development Framework
related talks
49mThe Secure Software Supply Chain
29mSupply Chain Security in the Software Era
18mExploring a Risk Approach to Software Supply Chain Security
22mSofware Supply Chain Security Is Hard. But Does it Need to Be?
32mSoftware Supply Chain Security
25mYour Software Supply Chain is Only as Secure as its Weakest Link
33mWhat is the secure software supply chain
39mSoftware Supply Chain Security