Supply Chain Vulnerabilities - CompTIA Security+ SY0-701 - 2.3

Understanding Supply Chain Security

Overview of the Supply Chain

• The supply chain encompasses the entire process from raw materials to consumer delivery, with security concerns at every step.

• Each phase—processing, suppliers, manufacturers, distributors, and consumers—can be vulnerable to attacks that inject malicious code or gain unauthorized access.

Trusting Suppliers and Equipment

• Organizations often trust their equipment suppliers without considering potential exploits in the supply chain. This can jeopardize data security if an attacker compromises any step.

• Managing systems internally allows for better oversight of software updates and security posture compared to outsourcing to third-party service providers.

Risks Associated with Third-Party Service Providers

• If a service provider is compromised, sensitive data may also be at risk due to their access to organizational systems. Multiple service providers increase this vulnerability across various functions like payroll and cloud services.

• Regular security audits are essential and typically included in contracts with service providers to ensure ongoing compliance and transparency regarding their security processes.

Case Study: Target Corporation Breach

• The Target breach in 2013 exemplifies risks associated with third-party vendors; attackers accessed Target's network through a compromised HVAC vendor's system. Over 40 million credit card numbers were stolen as a result.

• The interconnectedness of networks allowed attackers who infiltrated the HVAC system to access cash registers directly, highlighting vulnerabilities in network segmentation practices.

Hardware Security Concerns

• New hardware installations (e.g., firewalls, routers) should be treated as untrusted until verified for legitimate software use; trusting vendors blindly can lead to significant risks. Policies must govern hardware acquisition and implementation procedures.

• Following best practices for security during hardware integration is crucial since all organizational data passes through network devices that could serve as entry points for attackers.

Counterfeit Hardware Issues

• A notable incident involved counterfeit Cisco products sold by a reseller; these devices posed serious security threats after being integrated into various networks worldwide since 2013. Many malfunctioned or even caught fire due to poor manufacturing standards from China.

Trust and Security in Software Installation

The Importance of Trust in Software

• Trust is fundamental in security; it is crucial to trust the source of any software being installed.

• Digital signatures play a key role in establishing trust, as most operating systems validate these signatures during installation.

• Automatic software updates pose a challenge for trust since users may not be involved in the update process, increasing reliance on the software's integrity.

Challenges with Open Source Software

• While open-source software allows for transparency, it also presents risks; anyone with access can modify the code, potentially introducing malicious changes.

Case Study: SolarWinds Orion Attack

• The SolarWinds Orion incident exemplifies supply chain vulnerabilities; attackers inserted malicious code into widely used software affecting 18,000 customers, including major corporations and government entities.

• The compromised updates were digitally signed and distributed without raising suspicion among users who trusted the SolarWinds infrastructure.