The reviewed record of science sign in
Pith

arxiv: 2307.15642 · v1 · pith:QOAMDX4H · submitted 2023-07-28 · cs.CR

S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit

Mindy Tran , Yasemin Acar , Michel Cucker , William Enck , Alexandros Kapravelos , Christian Kastner , Laurie Williams This is my paper

Reviewed by Pith T0 review T1 audit T2 compute T3 formal T4 kernel pith:QOAMDX4Hrecord.jsonopen to challenge →

classification cs.CR
keywords chainindustrysoftwaresummitsupplyattacksbusinessesdiscussions
0
0 comments X
read the original abstract

Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing fatal damage to businesses and organizations. Past well-known examples of software supply chain attacks are the SolarWinds or log4j incidents that have affected thousands of customers and businesses. The US government and industry are equally interested in enhancing software supply chain security. We conducted six panel discussions with a diverse set of 19 practitioners from industry. We asked them open-ended questions regarding SBOMs, vulnerable dependencies, malicious commits, build and deploy, the Executive Order, and standards compliance. The goal of this summit was to enable open discussions, mutual sharing, and shedding light on common challenges that industry practitioners with practical experience face when securing their software supply chain. This paper summarizes the summit held on September 30, 2022.

This paper has not been read by Pith yet.

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Forward citations

Cited by 2 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score.

  1. S3C2 Summit 2025-09: Industry Secure Supply Chain Summit

    cs.CR 2026-05 unverdicted novelty 2.0

    The paper summarizes key takeaways from an industry-academia summit on securing software supply chains, covering vulnerable dependencies, malicious commits, build infrastructure, and related topics.

  2. S3C2 Summit 2025-07: Government Secure Supply Chain Summit

    cs.CR 2026-05 unverdicted novelty 1.0

    A descriptive report summarizing discussions from a government secure software supply chain summit covering SBOMs, compliance, malicious commits, build infrastructure, culture, and LLMs.