Software Supply Chain Security

Software supply chain security concerns the components and processes used to build, deliver, and update software. For an AI application, relevant inputs can include packages, model files, build scripts, and deployment configuration.

A matching checksum needs a trusted reference

A checksum is a value computed from a file to help detect changes. Comparing a download with an expected value can identify a mismatch. If both the file and expected value come from an untrusted source, agreement does not establish trustworthy origin.

Even a genuine artifact can contain a flaw or be inappropriate for a use.

Control introduction and change

Record approved sources and versions, restrict who can publish or deploy, and assess updates before use. Consider what artifact loaders and installation steps are allowed to execute. An inventory helps locate affected systems when a component is found unsafe; listing a component alone does not secure it.

Reference: OWASP: Threat Modeling.