SoK: Practical Detection of Software Supply Chain Attacks. - Marc Ohm; Charlene Stuke (ARES, 2023)