论文标题
针对软件开发管道的以诚信为中心的威胁模型
An Integrity-Focused Threat Model for Software Development Pipelines
论文作者
论文摘要
近年来，对软件完整性的关注越来越大，也就是说，保证软件尚未在开发人员和用户之间的道路上篡改。该路径由软件开发管道表示，并在软件供应链安全中起关键作用。尽管已经努力提高开发管道的安全性，但缺乏对影响它们的威胁的全面看法。我们使用Stride框架为通用软件开发管道开发了系统的威胁模型，并确定每个威胁的可能缓解措施。通过作为参考的管道包括五个阶段（集成，连续集成，基础架构 - 代码，部署和发布），我们在文献中报告的所有阶段中审查了漏洞和攻击。我们提出了一项案例研究，该案例研究将这种威胁模型应用于特定管道，这表明适应很简单，并产生了相关威胁列表。
In recent years, there has been a growing concern with software integrity, that is, the assurance that software has not been tampered with on the path between developers and users. This path is represented by a software development pipeline and plays a pivotal role in software supply chain security. While there have been efforts to improve the security of development pipelines, there is a lack of a comprehensive view of the threats affecting them. We develop a systematic threat model for a generic software development pipeline using the STRIDE framework and identify possible mitigations for each threat. The pipeline adopted as a reference comprises five stages (integration, continuous integration, infrastructure-as-code, deployment, and release), and we review vulnerabilities and attacks in all stages reported in the literature. We present a case study applying this threat model to a specific pipeline, showing that the adaptation is straightforward and produces a list of relevant threats.
