SoK - Taxonomy of Attacks on Open-Source Software Supply Chains

Explore a comprehensive taxonomy of attacks on open-source software supply chains in this 15-minute IEEE conference talk. Gain insights from experts Piergiorgio Ladisa, Henrik Plate, Matias Martinez, and Olivier Barais as they present their systematic organization of knowledge (SoK) on the subject. Delve into the various types of threats and vulnerabilities that can compromise the integrity and security of open-source software ecosystems. Learn about potential attack vectors, their impact, and strategies to mitigate risks in the software supply chain.