Latest / Software Engineering Radio - the podcast for professional software developers
SE Radio 535: Dan Lorenc on Supply Chain Attacks
Dan Lorenc, CEO of Chainguard, a software supply chain security company, joins SE Radio editor Robert Blumen to talk about software supply chain attacks. They start with a review of software supply chain basics; how outputs become inputs of someone else's supply chain; techniques for attacking the supply chain, including compromising the compilers, injecting code into installers, dependency confusion, and typo squatting. They also consider Ken Thompson's paper on injecting a backdoor into the C compiler. The episode then considers some well-known supply chain attacks: researcher Alex Birsan's…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.