Linked-Out: Security Principles to Break Software Supply Chain Attacks
summary
Examines three 2021 software supply chain attacks that affected enterprises (non-nation-state incidents) and extracts concrete security principles to stop their propagation. Focuses on real-world case studies and defensive approaches for preventing supply-chain compromise in enterprise software environments.
AI-written summary · about
chapters (13)
- 0:00Start
- 0:46Agenda
- 2:07What Are Software Supply Chain Attacks
- 13:36Content Security Policy
- 14:12Sub Resource Integrity
- 14:31Iframe Sandboxing
- 15:35A Data Center Supply Chain Attack Which Occurred on the Microsoft Exchange Server
- 19:01Defense Mechanism
- 20:59Checking the Data Outflow
- 28:42The Resource Inventory
- 29:18Minimize Your Exposure
- 42:34Question Answers
- 42:57How Do You Verify the Software Supply Chain of Your Vendors
related talks
16mThe Rise of Supply Chain Attacks
39mSoftware Supply Chain Security
38mSupply Chain Security & the Real World: Lessons From Incidents
37mSupply Chain Attacks and the Future of Software Delivery
25mSupply Chain Attacks
29mSupply Chain Security in the Software Era
15mSupply chain security for dummies
18mExploring a Risk Approach to Software Supply Chain Security