Beyond Minimum Standards
ABSTRACT
The recent Cybersecurity Executive Order asked agencies to define minimum standards for supply chain governance and software testing that could be required of all vendors selling software to the Federal Government. In this talk, I ask the question: what could minimal standards look like 10 years from now? I will describe recent research on software and supply chain security, focusing on emerging threats and promising approaches to mitigation.
BIO