# What is Software Supply Chain Security?

arXiv: https://arxiv.org/abs/2209.04006 · HTML: https://mlsanity.com/paper/2209.04006/

## Key facts

- Cited by 2 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 8 Sep 2022.

## Built on by (most cited first, 2 of 2)

- [Integrating Artificial Open Generative Artificial Intelligence into Software Supply Chain Security](https://mlsanity.com/paper/2412.19088/) (2024)
- [Resource-Optimized and Energy-Aware Agentic AI Framework Anchored on Blockchain for Secure Software Supply Chains](https://mlsanity.com/paper/2609.31282/) (2026)

## Abstract (arXiv)

The software supply chain involves a multitude of tools and processes that enable software developers to write, build, and ship applications. Recently, security compromises of tools or processes has led to a surge in proposals to address these issues. However, these proposals commonly overemphasize specific solutions or conflate goals, resulting in unexpected consequences, or unclear positioning and usage. In this paper, we make the case that developing practical solutions is not possible until the community has a holistic view of the security problem; this view must include both the technical and procedural aspects. To this end, we examine three use cases to identify common security goals, and present a goal-oriented taxonomy of existing solutions demonstrating a holistic overview of software supply chain security.