5 citations · 9 across the 3 of their papers we have counts for
4 papers
Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web
Ben Swierzy, Marc Ohm, Michael Meier
Reusable software components, typically distributed as packages, are a central paradigm of modern software development. The JavaScript ecosystem serves as a prime example, offering…
You Can Run But You Can't Hide: Runtime Protection Against Malicious Package Updates For Node.js
Marc Ohm, Timo Pohl, Felix Boes
Maliciously prepared software packages are an extensively leveraged weapon for software supply chain attacks. The detection of malicious packages is undoubtedly of high priority an…
Supporting the Detection of Software Supply Chain Attacks through Unsupervised Signature Generation
Marc Ohm, Lukas Kempf, Felix Boes +1
Trojanized software packages used in software supply chain attacks constitute an emerging threat. Unfortunately, there is still a lack of scalable approaches that allow automated a…
Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attacks
Marc Ohm, Henrik Plate, Arnold Sykosch +1
A software supply chain attack is characterized by the injection of malicious code into a software package in order to compromise dependent systems further down the chain. Recent y…