Regulation for software supply chains of blockchain
| Reference number | |
| Coordinator | Kungliga Tekniska Högskolan - KTH Skolan för elektroteknik och datavetenskap, avdelningen för teoretisk datalogi |
| Funding from Vinnova | SEK 1 000 000 |
| Project duration | July 2024 - June 2025 |
| Status | Ongoing |
| Venture | Regulation and cutting-edge technology |
| Call | Regulations and ground-breaking technology |
Purpose and goal
Our objective is to give a conceptual framework for sound regulation and mitigation of software supply chain risks in blockchain technology. It is decomposed into three sub-objectives:1) lay down the foundational definitions of software supply chain for blockchain. 2) devise a taxonomy of software supply chain attacks on blockchain technology. 3) map the developed taxonomy with existing regulatory concepts and operations, investigating current regulatory gaps and the lack of specific policies addressing blockchain application security.
Expected effects and result
We will lay down the soundtechnical foundations for regulating software supply chain risks in blockchain technology, and fill the gap in properly regulating the blockchain software supply chain.
Planned approach and implementation
Three work packages will be implemented, each corresponding to one of our primary objectives: 1) SoK: Review and Classification of Software Supply Chains for Blockchain 2) SoK: Taxonomy on Blockchain Software Supply Chain Attacks and Defenses 3) Regulation of Blockchain Software Supply Chain:Regulatory Concepts and Operations