“Gartner indicates that software supply chain attacks have seen triple-digit increases, but few organizations have taken steps to evaluate the risks of these complex attacks. This research provides three practices security and risk management leaders can use to detect and prevent attacks, and protect their organizations.”
The new report from Gartner identifies that software supply chain attacks have repeatedly demonstrated that software artifacts represent an attack surface through which malicious code can be introduced. Gartner mentions ReversingLabs in this report as a solution to identify malware and malicious code.
Key takeaways we believe you will get from this report:
- Why legacy development tools do not address the threats of Software Supply Chain attacks
- The importance of expanding vendor risk management to include software supply chain security risks
- Why SBOMs are critical to AppSec, as well as TPRM and Risk Management teams
- Why Complex Binary Automated Analysis of code to detect malware is so important now
Gartner, “Mitigate Enterprise Software Supply Chain Security Risks”
Dale Gardner, 31 October 2023
GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and is used herein with permission. All rights reserved. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.