This report summarizes the key takeaways from the S3C2 Summit 2025-09, a gathering of industry practitioners focused on identifying best practices and challenges in securing modern software supply cha…

The paper summarizes a Secure Software Supply Chain Summit held by the S3C2 center, detailing discussions among government agencies on critical security topics to inform future research and collaborat…

The paper introduces 'software supply chain smells,' structural indicators of security risks in third-party dependencies, and presents Dirty-Waters, a tool that detects these smells, finding that diff…

AmBox is a system that integrates ambient sensors directly with a blockchain to provide secure, verifiable, and tamper-resistant data for enhanced food traceability throughout the supply chain.

The paper proposes a zero-trust supply-chain assurance rubric for O-RAN RIC applications to secure the entire lifecycle, from development to runtime.

ChainGuards is a decentralized system that uses product-specific rules and blockchain technology to verify the reliability of sensor-derived data collected across a supply chain, successfully detectin…

This paper analyzes the Node Package Manager (npm) dependency network, demonstrates its vulnerability to targeted attacks, and proposes a defense strategy consisting of Centrality-Based Node-Hardening…

The paper argues that current Software Bills of Materials (SBOMs) are fundamentally flawed due to a lack of shared understanding regarding what constitutes a 'component,' demonstrating that existing t…

This paper investigates the survival of licenses in the supply chain of AI artifacts, finding that a large percentage of artifacts lack declared licenses and that obligation-bearing licenses have low…

The paper proposes a scalable snippet-driven method using web search snippets to construct a comprehensive supply chain knowledge graph (SCKG) for China, significantly expanding visibility beyond trad…

The paper introduces SynthChain, a comprehensive, multi-source synthetic testbed and dataset that demonstrates that detecting advanced software supply chain attacks requires fusing evidence from multi…

The paper proposes a dynamic queueing framework that estimates an organization's cyber resources and attack surface dynamics by analyzing the timestamps of vulnerabilities and fixes, achieving high ac…

This paper introduces Stigmergic Graph Memory (SGM), a method to improve warehouse throughput in many-to-many Multi-Agent Pickup and Delivery (MAPD) by using a bounded, decaying memory layer to record…

This paper proposes an approximation algorithm for the submodular joint replenishment problem with decomposable submodular ordering cost functions, achieving an O(k)-approximation.

The paper proposes and prototypes an NFC-based inventory control system for electronic stores, leveraging NFC's superior security and reliability compared to traditional barcodes.

This paper introduces ECO/CPO-DAG, a domain-specific accountability protocol for adversarial supply chains that uses contradiction detection as a supplemental validation layer.

This paper proposes a taxonomy of interaction requirements for human-AI interaction in public sector ICT procurement to ensure ethical compliance and sustainable value realization.

The paper empirically investigates the lead marketing ecosystem, revealing a highly non-compliant system that aggressively collects, shares, and monetizes sensitive personal data through deceptive bro…

This paper proposes a reliability-aware framework to solve the fuzzy shortest path problem in directed graphs, optimizing routes based not only on cost but also on the reliability of the associated fu…

The paper introduces CEON, a Circular Economy Ontology Network, designed to improve semantic interoperability and knowledge representation across diverse industry sectors throughout the product life c…