Propagation Model for SSC attacks: Why SBOM (tools) don't tell the whole truth

Ljubica Grgic, Lazar Maksimovic, Pavel Laskov

Ensuring security of software supply chains (SSC) is indispensable in today's world of modern software practices. SBOM (tools) have been introduced as relevant building blocks to e…