Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Understanding Supply Chain Risks and Protective Strategies

Calendar Mar 09, 2021 • User Avatar Brittany Day
1 min read
13.Lock StylizedMotherboard Esm H446
Topics%20covered

Topics Covered

open source software security insights open source security strategy attack vector cybersecurity strategies dependency confusion software supply chain protection techniques

Experts including Dr. David Wheeler, Director of Open Source Software Supply Chain Security at the Linux Foundation, discuss the growing trend in software supply chain attacks which use “dependency or namespace confusion” techniques, and how to secure software supply chains against these attacks.

Following a growing trend in software supply chain attacks which use “dependency or namespace confusion” techniques, I sat down for a discussion on software supply chain security with a few experts on the topic.

  • Dr. David Wheeler, Director of Open Source Software Supply Chain Security at the Linux Foundation
  • Dr. Trey Herr, Director of Cyber Statecraft Initiative at the Atlantic Council
  • Brian Fox, CTO and Co-founder of Sonatype

As the attack vector continues to gain further steam in the early months of 2021, we chatted about what’s happening, why this vector has taken off and how organizations can protect ourselves. 

The link for this article located at Security Boulevard is no longer available.