Invisible Supply Chain Attacks Based on Trojan Source
Emanuele Buchicchio, Luca Grilli, Eros Capobianco, Salvatore Cipriano, Diego Antonini · Computer · 2022
A new class of vulnerabilities, called trojan source, has been recently discovered by Boucher and Anderson. This work describes the state of the art of known trojan source attacks, illustrates two new attack variants involving configuration files and Java code, and describes practical preventive measures.