Software Supply Chain Security

Software Supply Chain Security is a cybersecurity discipline focused on protecting the integrity of the entire software lifecycle, from development to deployment. It involves securing all the components, tools, and processes that contribute to a final software product, such as source code, third-party libraries, developer tools, and CI/CD pipelines. The goal is to prevent malicious actors from injecting vulnerabilities or malware at any point in this chain, thereby ensuring that the software delivered to the end-user is authentic, untampered, and safe to use.

DownloadMS Word (.docx)Markdown (.md)
1.

1.1.

1.1.1.

1.1.2.

1.1.2.1.

1.1.2.1.1.

1.1.2.1.2.

1.1.2.1.3.

1.1.2.2.

1.1.2.2.1.

1.1.2.2.2.

1.1.2.2.3.

1.1.2.2.4.

1.1.2.2.5.

1.1.2.2.6.

1.1.2.2.7.

1.1.2.2.8.

1.1.2.3.

1.1.2.3.1.

1.1.2.3.2.

1.1.2.3.3.

1.1.2.3.4.

1.1.2.4.

1.1.2.4.1.

1.1.2.4.2.

1.1.2.4.3.

1.1.2.4.4.

1.1.2.5.

1.1.2.5.1.

1.1.2.5.2.

1.1.2.5.3.

1.1.2.5.4.

1.1.2.6.

1.1.2.6.1.

1.1.2.6.2.

1.1.2.6.3.

1.1.2.6.4.

1.1.2.7.

1.1.2.7.1.

1.1.2.7.2.

1.1.2.7.3.

1.1.2.7.4.

1.1.2.7.5.

1.2.

1.2.1.

1.2.1.1.

1.2.1.2.

1.2.1.3.

1.2.1.4.

1.2.2.

1.2.2.1.

1.2.2.2.

1.2.2.3.

1.2.2.4.

1.2.3.

1.2.3.1.

1.2.3.2.

1.2.3.3.

1.2.3.4.

1.2.4.

1.2.4.1.

1.2.4.2.

1.2.4.3.

1.2.4.4.

1.2.5.

1.2.5.1.

1.2.5.2.

1.2.5.3.

1.3.

1.3.1.

1.3.2.

1.3.3.

1.3.4.

1.3.5.

1.3.6.

1.4.

1.4.1.

1.4.1.1.

1.4.1.2.

1.4.1.3.

1.4.1.4.

1.4.2.

1.4.2.1.

1.4.2.2.

1.4.2.3.

1.4.2.4.

1.4.3.

1.4.3.1.

1.4.3.2.

1.4.3.3.

1.4.3.4.

1.4.4.

1.4.4.1.

1.4.4.2.

1.4.4.3.

1.4.5.

1.4.5.1.

1.4.5.2.

1.4.6.

1.4.6.1.

1.4.6.2.

Go to top

Next

2. Threat Landscape and Attack Vectors