Trusting Trust: Humans in the Software Supply Chain Loop

被引：5

作者：

Williams, Laurie

机构：

来源：

IEEE SECURITY & PRIVACY | 2022年 / 20卷 / 05期

关键词：

D O I：

10.1109/MSEC.2022.3173123

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

To what extent should one trust a statement that a program is free of Trojan horses? Perhaps it is more important to trust the people who wrote the software. . . . You can't trust code that you did not totally create yourself.

引用

页码：7 / 10

页数：4

共 8 条

[1] [Anonymous], 2021, 2021 State of the software supply chain: Open source security and dependency management take center stage
[2] [Anonymous], 2021, FED REGISTER
[3] Obtaining Trust in Executable Derivatives Using Crowdsourced Critiques With Blind Signatures
Drusinsky, Doron
Michael, James Bret
[J]. COMPUTER, 2020, 53 (04) : 51 - 56
[4] Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations
Enck, William
Williams, Laurie
[J]. IEEE SECURITY & PRIVACY, 2022, 20 (02) : 96 - 100
[5] Lewandowski K., 2020, SECURITY SCORECARDS
[6] REFLECTIONS ON TRUSTING TRUST
THOMPSON, K
[J]. COMMUNICATIONS OF THE ACM, 1984, 27 (08) : 761 - 763
[7] Torres-Arias S, 2019, PROCEEDINGS OF THE 28TH USENIX SECURITY SYMPOSIUM, P1393
[8] Zahan N., 2022, PROC INT C SOFTW ENG

← 1 →