article · 2021
Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
Ruian Duan, Omar Alrawi, Ranjita Pai Kasturi, Ryan Elder, Brendan Saltaformaggio, Wenke Lee
Cited by 95Open access
Abstract
organizations that rely on open-source interpreted programming languages for different internal and external applications. Attackers can infiltrate well-defended organization by simply subverting the software supply chain of registries. For example, eslint-scope [4], a package with millions of weekly downloads in Npm, was compromised to steal credentials from developers. Similarly, rest-client These attacks demonstrate how miscreants can covertly gain access to a wide-range of organizations by carrying out a software supply chain attack.
Cite this paper
Duan, R., Alrawi, O., Kasturi, R. P., Elder, R., Saltaformaggio, B., & Lee, W. (2021). Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages. https://doi.org/10.14722/ndss.2021.23055
Duan, Ruian, et al. “Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages.” 2021, https://doi.org/10.14722/ndss.2021.23055.
Duan, Ruian, Omar Alrawi, Ranjita Pai Kasturi, Ryan Elder, Brendan Saltaformaggio, and Wenke Lee. 2021. “Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages.” https://doi.org/10.14722/ndss.2021.23055.
Duan, R. et al. (2021) ‘Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages’. Available at: https://doi.org/10.14722/ndss.2021.23055.
@article{duan2021towards,
title = {{Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages}},
author = {Duan, Ruian and Alrawi, Omar and Kasturi, Ranjita Pai and Elder, Ryan and Saltaformaggio, Brendan and Lee, Wenke},
year = {2021},
doi = {10.14722/ndss.2021.23055}
}Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.