Unicode flaw leaves most software open to malicious code injection. Issue 11 (November 2021)

• Record Type: Journal Article
• Is Part Of: Network security. Volume 2021:Issue 11(2021)
• Page Start: 1
• Page End: 2
• Publication Date: 2021-11
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(21)00122-7
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : Researchers at Cambridge University have discovered a trick that could allow someone to insert malicious functionality into source code in a way that's unlikely to be picked up by either automated or manual code reviews. This could open the way to serious software supply chain attacks, especially with open source repositories.