Software security has become one of the more widely discussed and debated topics in the security industry in the last few years. But far less light has been shone on the security of the software supply chain, an increasingly thorny problem in today s environment. A new report, Software Integrity Controls: An Assurance-Based Approach to Minimize Risk in the Software Supply Chain, released today by SAFECode, found that it is generally not well-understood. The report looked at the practices and processes put in place by a variety of organizations, including Microsoft, Adobe and others, and found that there isn t necessarily a widely accepted set of common practices.
Source: https://threatpost.com/new-study-sees-need-better-software-integrity-controls-061410/74100/