Perspectives on the SolarWinds Incident
Sean Peisert, Bruce Schneier, Hamed Okhravi, Fabio Massacci, Terry Benzel, Carl E. Landwehr, Mohammad Mannan, Jelena Mirković, Atul Prakash, James Bret Michael
Abstract
A significant cybersecurity event has recently been discovered in which malicious actors gained access to the source code for the Orion monitoring and management software made by the company SolarWinds and inserted malware into that source code. This article contains brief perspectives from a few members of the IEEE Security & Privacy editorial board regarding that incident.
Topics & Concepts
MalwareComputer securityIncident responseEvent (particle physics)Computer scienceSoftwareCode (set theory)Source codeInternet privacyOperating systemProgramming languagePhysicsSet (abstract data type)Quantum mechanicsNetwork Security and Intrusion DetectionAdvanced Malware Detection TechniquesSmart Grid Security and Resilience