20 citations · 101 across the 31 of their papers we have counts for
7 papers · 1 filter
S3C2 Summit 2025-09: Industry Secure Supply Chain Summit
Md Atiqur Rahman, Yasemin Acar, Michel Cucker +5
Today's digital ecosystem relies heavily on software supply chains, which enable developers to reuse code and ship software at scale. However, a single vulnerable component can jeo…
S3C2 Summit 2025-07: Government Secure Supply Chain Summit
Sivana Hamer, Pat Morrison, William Enck +6
Software supply chains, while providing immense economic and software development value, are only as strong as their weakest link. Over the past several years, there has been an ex…
S3C2 Summit 2024-03: Industry Secure Supply Chain Summit
Greg Tystahl, Yasemin Acar, Michel Cukier +5
Supply chain security has become a very important vector to consider when defending against adversary attacks. Due to this, more and more developers are keen on improving their sup…
S3C2 Summit 2023-06: Government Secure Supply Chain Summit
William Enck, Yasemin Acar, Michel Cukier +3
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing fatal damage to businesses and organizations. Past well-know…
S3C2 Summit 2023-02: Industry Secure Supply Chain Summit
Trevor Dunlap, Yasemin Acar, Michel Cucker +4
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing fatal damage to businesses and organizations. Past well-know…
S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit
Mindy Tran, Yasemin Acar, Michel Cucker +4
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing fatal damage to businesses and organizations. Past well-know…
Containing Malicious Package Updates in npm with a Lightweight Permission System
Gabriel Ferreira, Limin Jia, Joshua Sunshine +1
The large amount of third-party packages available in fast-moving software ecosystems, such as Node.js/npm, enables attackers to compromise applications by pushing malicious update…