Concepedia

Software Supply Chain Security

Software Supply Chain Security is a security framework that ensures the integrity, confidentiality, and availability of software components and their dependencies throughout the development, deployment, and operational lifecycle by mitigating risks introduced through third-party artifacts, tools, and processes within the secure DevOps pipeline.

43

Publications

1.4K

Citations

100

Authors

54

Institutions

Publications per year

2017–2026

38

Parents

Publications

43

SoK: Taxonomy of Attacks on Open-Source Software Supply Chains

Piergiorgio Ladisa, Henrik Plate, Matías Martínez et al. · 2023 · 131 citations · Full text

, , +14

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

Ruian Duan, Omar Alrawi, Ranjita Pai Kasturi et al. · 2021 · 98 citations · Full text

, , +16

Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations

William Enck, Laurie Williams · IEEE Security & Privacy · 2022 · 88 citations

, , +13

An Empirical Study on Software Bill of Materials: Where We Stand and the Road Ahead

Boming Xia, Tingting Bi, Zhenchang Xing et al. · 2023 · 82 citations

, , +13

Software Supply Chain Attacks, a Threat to Global Cybersecurity: SolarWinds’ Case Study

Jeferson Martínez, Javier M. Durán · International Journal of Safety and Security Engineering · 2021 · 79 citations · Full text

, , +16

1–5 of 43

Authors

100

  1. HP
    Henrik Plate

    University of Trento, Italy

    4 publications · 206 citations

    4

    h-index

  2. PL
    Piergiorgio Ladisa

    Institut de Recherche en Informatique et Systèmes Aléatoires, France

    3 publications · 161 citations

    3

    h-index

  3. YA
    Yasemin Acar

    Leibniz University Hannover, Germany

    2 publications · 41 citations

    3

    h-index

  4. WE
    William Enck

    North Carolina State University, United States

    2 publications · 111 citations

    3

    h-index

  5. OB
    Olivier Barais

    Université de Rennes, France

    3 publications · 161 citations

    3

    h-index

1–5 of 100

Institutions

54

  1. Helmholtz Center for Information Security

    Saarbrücken, Germany

    4 h-index

    8 publications

    140 citations

  2. Paderborn University

    Paderborn, Germany

    3 h-index

    3 publications

    59 citations

  3. University of Trento

    Trento, Italy

    3 h-index

    6 publications

    213 citations

  4. George Washington University

    Washington, United States

    3 h-index

    2 publications

    41 citations

  5. Purdue University West Lafayette

    West Lafayette, United States

    3 h-index

    10 publications

    297 citations

  6. Carnegie Mellon University

    Pittsburgh, United States

    3 h-index

    6 publications

    230 citations

  7. North Carolina State University

    Raleigh, United States

    3 h-index

    3 publications

    199 citations

  8. Institut de Recherche en Informatique et Systèmes Aléatoires

    Rennes, France

    2 h-index

    3 publications

    161 citations

1–8 of 54

Venues

  1. IEEE Security & Privacy

    3 publications · 160 citations

    3

    h-index

  2. Computer

    2 publications · 31 citations

    2

    h-index

  3. arXiv (Cornell University)

    Repository · 2 publications · 27 citations

    2

    h-index

  4. 1

    h-index

  5. 1

    h-index

1–5