Work

What Gets Measured Gets Managed: Mitigating Supply Chain Attacks with a Link Integrity Management System

Year: 2025

Type: conference-paper

Abstract: The web continues to grow, but dependency-monitoring tools and standards for resource integrity lag behind. Currently, there exists no robust method to verify the integrity of web resources, much less in a generalizable yet performant manner, and supply chains remain one of the most targeted parts of the attack surface of web applications.

Source: ACM SIGSAC Conference on Computer and Communications Security (CCS)

DOI: 10.1145/3719027.3765094

Authors: Johnny So, Michael Ferdman, Nick Nikiforakis

Institution: Stony Brook University

Language: English

Topic: Web Application Security Vulnerabilities

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

Funders: National Science Foundation, Office of Naval Research

Awards: CAREER: Tools and Techniques for Preserving Integrity on the Web, G7097814908