Assessing the Threat Level of Software Supply Chains with the Log Model

Luıs Soeiro, Thomas Robert, Stefano Zacchiroli

The use of free and open source software (FOSS) components in all software systems is estimated to be above 90%. With such high usage and because of the heterogeneity of FOSS tools…