Is a Secure Software Supply Chain Even Possible, Let Alone Feasible?

No ratings

Presented at RSAC 2022 by

Steven Sager

Many of the concepts discussed in software supply chain security come out of old fashioned material goods supply chains. "Chain" is a broken metaphor for security. The software supply "web" would be more appropriate. This session will present and debate alternative models developers should be using from other industries, which is a mix of standards, some testing, and some enforcement.