This description was written by a machine and published without a person checking it. It is what the agent made of this grouping, and not a statement anybody has stood behind.
Trust you did not create yourself
A subject the papers are about. The loosest grouping, and the one to reach for last.
Where trust in a running system comes from, when it cannot come from reading the source. Thompson's compiler attack is the origin; the rest is the industry discovering four decades later that he was describing a supply chain. Collects the attacks and the provenance, attestation and reproducible-build defences that answer them.
8 references
Red-teaming for generative AI: Silver bullet or security theater?
Michael Feffer and others (2024) · Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society
When trust fails: Examining systemic risk in the digital economy from the 2024 crowdstrike outage
A. Shaji George (2024) · Partners Universal Multidisciplinary Research Journal
Zero trust cybersecurity: Critical success factors and A maturity assessment framework
William Yeoh and others (2023) · Computers & Security
Software supply chain attacks, a threat to global cybersecurity: SolarWinds' case study
Jeferson Martínez and others (2021) · International Journal of Safety and Security Engineering
Trust and vulnerability in open source software
Scott A. Hissam and others (2002) · IEE Proceedings - Software · Institution of Engineering and Technology
Multics security evaluation: vulnerability analysis
Paul A. Karger and others (2002) · 18th Annual Computer Security Applications Conference (ACSAC 2002)
Thirty years later: lessons from the Multics security evaluation
P.A. Karger and others (2002) · 18th Annual Computer Security Applications Conference (ACSAC 2002) · IEEE Comput. Soc
Reflections on Trusting Trust
Ken Thompson (1984) · Communications of the ACM · Association for Computing Machinery