mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-04-16 09:34:18 +00:00
b908814c74
Software supply chain attacks aim to inject malicious code into a software product. There are several ways a malicious code can be injected into a software product (open-source project). These include: - Malicious code commits - Malicious dependencies - Malicious toolchains This document provides analysis of software supply chain attack threats for the TF-A project Change-Id: I03545d65a38dc372f3868a16c725b7378640a771 Signed-off-by: Lauren Wehrmeister <lauren.wehrmeister@arm.com> |
||
|---|---|---|
| .. | ||
| draw.io | ||
| plantuml | ||
| arm-cca-software-arch.png | ||
| bl31-exception-entry-error-synchronization.png | ||
| cmake_framework_structure.png | ||
| cmake_framework_workflow.png | ||
| context_management_abs.png | ||
| context_mgmt_existing.png | ||
| context_mgmt_proposed.png | ||
| default_reset_code.png | ||
| ff-a-lsp-at-el3.png | ||
| ff-a-spm-at-el3.png | ||
| ff-a-spm-sel2.png | ||
| ffa-secure-interrupt-handling-nwd.png | ||
| ffa-secure-interrupt-handling-swd.png | ||
| FIP_in_a_GPT_image.png | ||
| fwu_flow.png | ||
| fwu_states.png | ||
| int_handling.dia | ||
| Makefile | ||
| measured_boot_design.dia | ||
| measured_boot_design.png | ||
| MMU-600.png | ||
| non-sec-int-handling.png | ||
| partition-package.png | ||
| PSA-FWU.dia | ||
| PSA-FWU.png | ||
| psci-flattened-vs-hierarchical-idle-states.png | ||
| psci-osi-mode.png | ||
| psci-pc-mode-vs-osi-mode.png | ||
| psci-suspend-sequence.png | ||
| reset_code_flow.dia | ||
| reset_code_no_boot_type_check.png | ||
| reset_code_no_checks.png | ||
| reset_code_no_cpu_check.png | ||
| rmm_cold_boot_generic.dia | ||
| rmm_cold_boot_generic.png | ||
| romlib_design.dia | ||
| romlib_design.png | ||
| romlib_wrapper.dia | ||
| romlib_wrapper.png | ||
| rss_attestation_flow.svg | ||
| rss_measured_boot_flow.svg | ||
| rt-svc-descs-layout.png | ||
| sec-int-handling.png | ||
| secure_sw_stack_sp.png | ||
| secure_sw_stack_tos.png | ||
| spm-threat-model-trust-boundaries.png | ||
| tf-a_attack_tree.png | ||
| tf-a_data_flow_diagram.png | ||
| tf-a_system_diagram.png | ||
| xlat_align.dia | ||
| xlat_align.png | ||
