Taxonomy of Attacks on Open-Source Software Supply Chains - Visualization Tool & Selected Papers

This artifact complements the paper "SoK: Taxonomy of Attacks on Open-Source Software Supply Chains", submitted at IEEE S&P 2022 (submission #86).

The papers selected during the Systematic Literature Review (SLR) are presented in the PDF document.

This visualization tool allows to explore the taxonomy of attacks on OSS supply chains, as well as the related safeguards.

By single-clicking on the collapsed node, it is possible to analyze the further refinement of each attack vector into sub-techniques. By double-clicking on each attack vector is possible to display the associated information (i.e., ID, description, impact, scientific reference, examples and mapped safeguards).