1 citations · 1 across the 11 of their papers we have counts for
Showing 2024 · cs.CRShow all
2 papers · 2 filters
cs.CR2024
Context-Aware Trust Verification for Identity-Based Software Signing
Chinenye Okafor, James C. Davis, Santiago Torres-Arias
Modern software release infrastructure uses identity-based software signing to associate software artifacts with a known identity. For example, registries such as npm and Docker Hu…
cs.CR2024
Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors
Taylor R Schorlemmer, Kelechi G Kalu, Luke Chigges +5
Many software applications incorporate open-source third-party packages distributed by public package registries. Guaranteeing authorship along this supply chain is a challenge. Pa…