ᛌᛐᚱᛆᛐᛁᚴᛁᛌᚴ ᛌᛁᚴᚿᛆᛚ · SIG-2026-065

ᛐᚱᚢᚴᚴ ᛒᚱᚢᚴᚱᛆᛘᚠᛆᚱᛁᚢᛐᚠᛁᚴᛚᛁᚿᚴ ᛌᛐᚱᛁᚴᚴᛁᛁᚱ ᛌᛁᚴ ᚴᛁᛁᚿᚿᚢᛘ ᚽᛁᛁᛚᛁ ᛒᚢᚴᚴᛁᛁ- ᚢᚴ ᛚᛁᚠᛁᚱᛁᚿᚴᛌᛒᛆᚿᛆ

NIST ᛌᛁᛐᛐ SSDF-ᚢᛐᚴᛆᛌᛐ ᚢᚴ ᛁᚿᛐᛁᛚᛁᚴᛁ ᚱᛁᛐᛐᛚᛁᛁᛁᚿᚴ ᚠᚢᚱ ᛒᚱᚢᚴᚱᛆᛘᚠᛆᚱᛁᚠᚢᚱᛌᚢᚿᛁᚿᚴ ᛁ ᚴᚢᚿᛐᛁᚿᚢᛁᚱᛚᛁᚴᛁ ᛒᚢᚴᚴᛁᛁᛒᛆᚿᛁᚱ ᛚᛁᚴᚴ ᛐᚱᚢᚴᚴᛚᛁᛁᚴ ᛁᚿᚿ ᛁ ᚢᛐᚠᛁᚴᛚᛁᚿᚴ, ᛒᚢᚴᚴᛁᚿᚴ, ᛆᛐᛐᛁᛌᛐᛆᛌᛁᚢᚿ, ᛒᛆᚴᚴᛁᚿᚴ ᚢᚴ ᛚᛁᚠᛁᚱᛁᚿᚴ. CISA ᛌᛁ ᚱᛁᛐᛐᛚᛁᛁᛁᚿᚴ ᚴᛁᛁᚱ ᛁᚿᚴᛁᛚᛐᛁ ᚱᚢᛐᚭᚱᛌᛆᚴᛁᚱ ᛌᛅᚱᛚᛁᚴ ᚢᛆᚴᛌᛁᛒᛐᛆᛒᛚᛁ.

  • ᚢᛆᚠᚽᛁᚿᚴᛁᚴ ᛌᛐᛆᛐᚠᛁᛌᛐᛆ CORROBORATED
  • ᛆᚴᛐᚢᛁᛚᛚ CURRENT
  • E4
  • C4

ᛐᛁᚱᛁᚴᛐᛁ ᛌᚠᛆᚱ

NIST ᛌᛁᛐᛐ SSDF-ᚢᛐᚴᛆᛌᛐ ᚢᚴ ᛁᚿᛐᛁᛚᛁᚴᛁ ᚱᛁᛐᛐᛚᛁᛁᛁᚿᚴ ᚠᚢᚱ ᛒᚱᚢᚴᚱᛆᛘᚠᛆᚱᛁᚠᚢᚱᛌᚢᚿᛁᚿᚴ ᛁ ᚴᚢᚿᛐᛁᚿᚢᛁᚱᛚᛁᚴᛁ ᛒᚢᚴᚴᛁᛁᛒᛆᚿᛁᚱ ᛚᛁᚴᚴ ᛐᚱᚢᚴᚴᛚᛁᛁᚴ ᛁᚿᚿ ᛁ ᚢᛐᚠᛁᚴᛚᛁᚿᚴ, ᛒᚢᚴᚴᛁᚿᚴ, ᛆᛐᛐᛁᛌᛐᛆᛌᛁᚢᚿ, ᛒᛆᚴᚴᛁᚿᚴ ᚢᚴ ᛚᛁᚠᛁᚱᛁᚿᚴ. CISA ᛌᛁ ᚱᛁᛐᛐᛚᛁᛁᛁᚿᚴ ᚴᛁᛁᚱ ᛁᚿᚴᛁᛚᛐᛁ ᚱᚢᛐᚭᚱᛌᛆᚴᛁᚱ ᛌᛅᚱᛚᛁᚴ ᚢᛆᚴᛌᛁᛒᛐᛆᛒᛚᛁ.

ᚴᚠᛆ ᛁᚿᛐᚱᛆ ᛌᛁᚴ

ᚢᛒᛒᛐᛆᛐᛁᚱᛐᛁ ᚱᛆᛘᛘᛁᚱ ᚴᛁᛁᚱ ᛚᛁᚠᛌᛚᚯᛒᛌᚢᛒᛒᚴᚭᚠᛁᚱ, ᛒᚢᚴᚴᛁᛁᛒᚱᚢᚠᛁᚿᛁᛁᚿᛌ, ᛌᚭᚱᛒᛆᚱᚽᛁᛁᛐᛌᚠᚯᚱᛁᛒᚢᚴᚴᛁᚿᚴ ᚢᚴ ᛚᛁᚠᛁᚱᛆᚿᛐᚯᚱᚴᚢᛘᛘᚢᚿᛁᚴᛆᛌᛁᚢᚿ ᛐᛁᛚ ᛁᛁᛐᛐ ᛌᛆᛘᛆᚿᚽᛁᚿᚴᛆᚿᛐᛁ ᚴᚢᚿᛐᚱᚢᛚᛚᚢᛘᚱᚭᛐᛁ.

ᚴᚠᛁᚠᚢᚱ ᛐᛁᛐ ᚴᛆᚿ ᚽᛆ ᛐᚢᛐᛁᚿᚴ

ᛁᛁᛐ ᛌᛁᚴᚿᛁᚱᛐ ᛌᛚᚢᛐᛐᛒᚱᚢᛐᚢᚴᛐ ᚴᛆᚿ ᚠᚱᛆᛘᛚᛁᛁᛌ ᚠᛁᚱᛆ ᚢᛐᚱᚢᚴᛐ ᛐᛁᚱᛌᚢᛘ ᚴᛁᛁᛚᛐᛁ, ᛒᚢᚴᚴᛁᛆᚱ, ᛆᚠᚽᛁᚿᚴᚿᛆᛐᛁᚱ ᛁᛚᛚᛁᚱ ᛚᛁᚠᛁᚱᛁᚿᚴᛌᛒᛆᚿᛁ ᛁᚱ ᚴᚢᛘᛒᚱᚢᛘᛁᛐᛐᛁᚱᛐᛁ.

ᛌᛐᚱᛆᛐᛁᚴᛁᛌᚴ ᛐᚢᛚᚴᛁᚿᚴ

ᚢᛒᛌᛁᚱᚠᛆᛐᚢᚱᛁᛁᛐ ᛚᛁᛌ ᛐᛁᛐᛐᛁ ᛌᚢᛘ ᛁᛁᛐ ᛆᚠᚴᚱᛁᚿᛌᛆ ᚱᛁᛐᚿᛁᚿᚴᛌᛌᛁᚴᚿᛆᛚ. ᛐᚢᛚᚴᛁᚿᚴᛆ ᛌᚴᛁᛚ ᛐᚢᚴᚢᛘᛁᚿᛐᛌᛐᛆᛐᚢᛌ, ᚠᛆᚴᛐᛁᛌᚴ ᚴᛁᛁᚿᚿᚢᛘᚠᚯᚱᛁᚿᚴ, ᛐᚱᛁᚠᛐᛌᚱᛁᛌᚢᛚᛐᛆᛐ, ᚱᛁᛐᛐᛌᚠᛁᚱᚴᚿᛆᛐ ᚢᚴ ᚢᚠᚠᛁᚿᛐᛚᛁᚴ ᛘᚢᚿᛐᛁᚴᚽᛁᛁᛐ ᚠᚱᚭ ᚴᚠᛆᚱᛆᚿᛐᚱᛁ.

ᛌᛐᚯᛐᛐᛆᚿᛐᛁ ᛁᚠᛁᛐᛁᚿᛌ

NIST ᚢᚴ CISA ᛌᛐᚯᛐᛐᛆᚱ ᛒᚭᛐᛁ ᛒᚱᚢᛌᛁᛌᛌᚴᚢᚿᛐᚱᚢᛚᛚ, ᛒᚢᚴᚴᛁᛁᛒᛆᚿᛁ ᚢᚴ ᛒᚱᚢᛐᚢᛌᛁᚿᛐᛆᚿᛌᚠᛆᚱ.

ᛘᚢᛐᛌᛐᚱᛁᛐᛆᚿᛐᛁ ᛁᚠᛁᛐᛁᚿᛌ

ᚱᛆᛘᛘᛁᚿᛁ ᛁᚱ ᚴᛁᚿᛁᚱᛁᛚᛚᛁ, ᛁᛁᛐᛐ ᛐᚢᚴᚢᛘᛁᚿᛐ ᛁᚱ ᚢᛐᚴᛆᛌᛐ, ᚢᚴ ᛐᛁᛁ ᛌᛁᛁᛁᚱ ᛁᚴᚴᛁᛁ ᚴᚠᛆ ᚴᚢᚿᛐᚱᚢᛚᛚᛆᚱ ᛌᚢᛘ ᛁᚱ ᛁᚠᚠᛁᚴᛐᛁᚠᛁ ᛁ ᛆᛚᛚᛁ ᛆᚱᚴᛁᛐᛁᚴᛐᚢᚱᛆᚱ.

ᛘᚢᛐᛁᚿᛐᛁᚴᛆᛐᚢᚱᛆᚱ

ᛆᛐᛐᛁᛌᛐᛆᛌᛁᚢᚿ ᚢᛐᛆᚿ ᛁᛌᚢᛚᛁᚱᛐ ᛒᚢᚴᚴᛁᛆᚱ, ᚱᛁᛒᚱᚢᛐᚢᚴᛌᛁᚢᚿ, ᚿᚯᚴᚴᛁᛚᚠᛁᚱᚿ ᛁᛚᛚᛁᚱ ᚱᛁᛐᛐᛁᚿᚴ ᛆᚠ ᚱᚢᛐᚭᚱᛌᛆᚴ ᚠᛁᛚ ᛌᚠᛁᚴᚴᛁᛆ ᛁᚠᛁᛐᛁᚿᛌᚠᛁᚱᛐᛁᛁᚿ.

ᛆᛚᛐᛁᚱᚿᛆᛐᛁᚠᛁ ᚠᚢᚱᚴᛚᛆᚱᛁᚿᚴᛆᚱ

ᛆᚢᚴᛆ ᛐᚢᚴᚢᛘᛁᚿᛐᛆᛌᛁᚢᚿ ᚴᛆᚿ ᚠᛁᚱᛆ ᛌᚠᛆᚱ ᛒᚭ ᛁᚿᚿᚴᛁᚯᛒᛌᚴᚱᛆᚠ ᚢᛐᛆᚿ ᛐᛁᛚᛌᚠᛆᚱᛆᚿᛐᛁ ᛐᛁᚴᚿᛁᛌᚴ ᚠᚢᚱᛒᛁᛐᚱᛁᚿᚴ.

ᚢᚴᛁᛁᚿᛐᛁ ᚠᚢᚱᚽᚢᛚᛐ

ᚠᛆᚴᛐᛁᛌᚴ ᛒᚢᚴᚴᛁᛁᛁᛌᚢᛚᛆᛌᛁᚢᚿ, ᚿᚯᚴᚴᛁᛚᛌᛐᚢᚱᛁᚿᚴ, ᛆᚠᚽᛁᚿᚴᚿᛆᛐᛌᛐᛁᚴᚿᛁᚿᚴ ᚢᚴ ᚴᛁᛁᚿᚢᛒᛒᚱᛁᛐᛐᛁᚿᚴ ᛁᛐᛐᛁᚱ ᚴᚢᛘᛒᚱᚢᛘᛁᛌᛌ ᛁᚱ ᚢᚴᛁᛁᚿᛐ.

ᛚᛁᛁᛆᚿᛐᛁ ᛁᚿᛐᛁᚴᛆᛐᚢᚱᛆᚱ ᚭ ᚠᚯᛚᚴᛁᛆ

ᚠᚯᛚᚴ ᚴᛁᛁᛚᛐᛁᚴᚢᚿᛐᚱᚢᛚᛚ, ᛒᚢᚴᚴᛁᛁᛁᛌᚢᛚᛆᛌᛁᚢᚿ, ᛆᛐᛐᛁᛌᛐᛆᛌᛁᚢᚿ, SBOM, ᛌᛁᚴᚿᛁᚱᛁᚿᚴᛌᚿᚯᚴᛚᛆᚱ, ᚱᛁᛒᚱᚢᛐᚢᚴᛌᛁᚢᚿ, ᚱᛁᛐᛐᛁᚿᚴᛌᛐᛁᛐ ᚢᚴ ᛌᛐᚯᛐᛐᛁᛚᛁᚠᛌᛚᚯᛒ.

ᛆᚿᛆᛚᚢᛐᛁᛌᚴᛁ ᛐᛁᚱᛌᚴᛚᛆᚱ

ᛌᛐᚢᚱᚴ ᛌᛁᚴᚿᛆᛚᛁᛐ ᚿᚭᚱ ᚢᛆᚠᚽᛁᚿᚴᛁᚴ ᚱᛁᛒᛚᛆᚢ ᚢᚴ ᚽᛁᚿᛐᛁᚿᚴᛌᛐᛁᛌᛐᛆᚱ ᚠᛁᛌᛁᚱ ᛆᛐ ᛒᚢᚴᚴᛁᛁᛒᛆᚿᛆ ᚢᛒᛒᛐᛆᚴᛆᚱ ᚢᚴ ᛆᚠᚴᚱᛁᚿᛌᛆᚱ ᛘᛆᚿᛁᛒᚢᛚᛆᛌᛁᚢᚿ.

ᛘᚢᚴᛚᛁᚴᛁ ᚠᚯᛚᚴᛁᛁᚱ

ᛘᚢᚴᛚᛁᚴᛁ ᚠᚯᛚᚴᛁᛁᚱ ᛁᚱ ᚽᚯᚴᛆᚱᛁ ᛒᚢᚴᚴᛁᛁᚴᚢᛌᛐᚿᛆᛐ, ᛒᛁᛐᚱᛁ ᛌᛒᚢᚱᛒᛆᚱᚽᛁᛁᛐ, ᚠᛅᚱᚱᛁ ᚱᚢᛐᚭᚱᛌᛆᚴᛁᚱ ᚢᚴ ᛘᛁᛁᚱ ᛒᚱᛁᛌᛁᛌᛐ ᛚᛁᚠᛁᚱᛆᚿᛐᚯᚱᛆᚿᛌᚠᛆᚱ.

ᛐᛁᛐᛌᚽᚢᚱᛁᛌᚢᚿᛐᛆᚱ

ᚿᛅᚱ ᚽᚢᚱᛁᛌᚢᚿᛐ ᛁᚱ ᚠᚱᛆᛘ ᛐᛁᛚ ᛐᚢᛚᚠ ᛘᚭᚿᛆᛐᛁᚱ, ᛘᛁᛚᛚᚢᛘᛚᛆᚿᚴ ᚽᚢᚱᛁᛌᚢᚿᛐ ᛁᛁᛐᛐ ᛐᛁᛚ ᛐᚱᛁ ᚭᚱ ᚢᚴ ᛚᛆᚿᚴ ᚽᚢᚱᛁᛌᚢᚿᛐ ᛘᛁᛁᚱ ᛁᚿᚿ ᛐᚱᛁ ᚭᚱ. ᛌᛐᛆᛐᚢᛌ ᛌᚴᛆᛚ ᛐᛁᚴᚱᛆᛐᛁᚱᛆᛌᛐ ᚿᚭᚱ ᚴᛁᛁᛚᛐᛁᚴᚱᚢᚿᚿᛚᛆᚴᛁᛐ ᛒᛚᛁᚱ ᛁᛚᛐᚱᛁ ᛁᛚᛚᛁᚱ ᚠᚯᚱᛁᛌᛁᛐᚿᛆᛐᛁᚿᛁ ᛁᚿᛐᚱᛆᚱ ᛌᛁᚴ.

ᚠᚯᛚᚴᛁᛁᚱ ᚠᚢᚱ ᚯᚴᚢᛌᚢᛌᛐᛁᛘᛁᛐ

ᚲ.com ᚴᛆᚿ ᚽᛆᛚᛐᛆ ᚢᛘᚴᚱᛁᛒ, ᚨ.com ᚴᛆᚿ ᚽᛆᛚᛐᛆ ᛆᚢᛐᚢᚱᛁᛌᛁᚱᛐᛁ ᛁᚠᛁᛐᛁᚿᛌᛒᚢᛌᛐᛆᚱ, ᛉ.com ᚴᛆᚿ ᛒᚱᚯᚠᛆ ᛐᚱᚢᚴᚴᛁᚿᚴ ᚢᚴ ᛌᛁᛘᚢᛚᛁᚱᛁᚿᚴ, ᛟ.com ᚴᛆᚿ ᚠᚢᚱᛐᛁᚱᛆ ᛌᛐᚢᚱᛁᚿᚴᛌᚠᚯᛚᚴᛁᛁᚱ ᚢᚴ ᛜ.com ᚴᛆᚿ ᚠᚢᚱᛐᛁᚱᛆ ᚴᛆᛒᛁᛐᛆᛚᚠᚯᛚᚴᛁᛁᚱ. ᛌ.com ᚽᛁᛚᛐ ᛒᛁᚱᚱᛁ ᚢᛒᛌᛁᚱᚠᛆᛌᛁᚢᚿᛌ- ᚢᚴ ᚠᚱᛆᛘᛌᚢᚿᛌᚱᚢᛚᛚᛆ.

ᛆᚠᚴᚱᛁᚿᛌᛁᚿᚴᛆᚱ

ᚴᛁᛁᛚᛐᛁᚿᛁ ᛐᚢᚴᚢᛘᛁᚿᛐᛁᚱᛁᚱ ᚢᚠᚠᛁᚿᛐᛚᛁᚴ ᛌᛐᛆᛐᚢᛌ ᚢᚴ ᛘᛁᛐᚢᛐᛁ, ᛘᛁᚿ ᛒᚱᚢᚠᛆᚱ ᛁᚴᚴᛁᛁ ᚢᚿᛁᚠᛁᚱᛌᛁᛚᛚ ᛁᛐᛐᛁᚱᛚᛁᚠᛁᚿᚴ, ᛌᛁᚴᚴᛁᚱ ᛁᛘᛒᛚᛁᛘᛁᚿᛐᛆᛌᛁᚢᚿ, ᛚᛁᚠᛆᚿᛐᛁ ᛐᚱᛁᚠᛐ, ᚭᚱᛌᛆᚴ ᛁᛚᛚᛁᚱ ᚠᚱᛆᛘᛐᛁᛐᛁᚴ ᚢᛐᚠᛆᛚᛚ.

ᚴᚠᛆ ᛌᛁᚴᚿᛆᛚᛁᛐ ᛁᚴᚴᛁᛁ ᛒᚱᚢᚠᛆᚱ

ᛌᛁᚴᚿᛆᛚᛁᛐ ᛒᚱᚢᚠᛆᚱ ᛁᚴᚴᛁᛁ ᚭᚱᛌᛆᚴ, ᚠᚢᛚᛚᛌᛐᛁᚿᛐᛁ, ᚢᛒᛁᚱᛆᛐᛁᚠ ᛌᛐᛆᛐᚢᛌ, ᚱᛁᛐᛐᛌᛚᛁᚴ ᛘᚢᚿᛐᛁᚴᚽᛁᛁᛐ, ᛌᛁᚴᚴᛁᚱ ᚠᚱᛆᛘᛐᛁᛐ ᛁᛚᛚᛁᚱ ᛆᛐ ᛁᛁ ᚽᛆᚿᛐᛚᛁᚿᚴ ᛁᚱ ᛒᛁᛌᛐᛁᛚᛐ.

ᚴᛁᛁᛚᛐᛁᚱ

  1. ᚢᛐᚴᛆᛌᛐ ᛐᛁᛚ ᛐᚱᚢᚴᚴ ᛒᚱᚢᚴᚱᛆᛘᚠᛆᚱᛁᚢᛐᚠᛁᚴᛚᛁᚿᚴᛌᚱᛆᛘᛘᛁ 1.2 SRC-157 · ᛐᛁᛐ ᚿᛆᛌᛁᚢᚿᛆᛚᛁ ᛁᚿᛌᛐᛁᛐᚢᛐᛐᛁᛐ ᚠᚢᚱ ᛌᛐᛆᚿᛐᛆᚱᛐᛆᚱ ᚢᚴ ᛐᛁᚴᚿᚢᛚᚢᚴᛁ ·
  2. ᛌᛐᚱᛆᛐᛁᚴᛁᛆᚱ ᚠᚢᚱ ᛒᚱᚢᚴᚱᛆᛘᚠᛆᚱᛁᚠᚢᚱᛌᚢᚿᛁᚿᚴᛌᛐᚱᚢᚴᚴᛚᛁᛁᚴ ᛁ ᚴᚢᚿᛐᛁᚿᚢᛁᚱᛚᛁᚴᛁ ᛒᚢᚴᚴᛁᛁ- ᚢᚴ ᛚᛁᚠᛁᚱᛁᚿᚴᛌᛒᛆᚿᛁᚱ SRC-158 · ᛐᛁᛐ ᚿᛆᛌᛁᚢᚿᛆᛚᛁ ᛁᚿᛌᛐᛁᛐᚢᛐᛐᛁᛐ ᚠᚢᚱ ᛌᛐᛆᚿᛐᛆᚱᛐᛆᚱ ᚢᚴ ᛐᛁᚴᚿᚢᛚᚢᚴᛁ ·
  3. ᚱᛁᛐᛐᛚᛁᛁᛁᚿᚴ ᚢᛘ ᛌᛅᚱᛚᛁᚴ ᚱᛁᛌᛁᚴᚢᚠᚢᛚᛐ ᛒᚱᛆᚴᛌᛁᛌ ᛁ ᛒᚱᚢᛐᚢᚴᛐᛐᚱᚢᚴᚴᛚᛁᛁᚴ SRC-141 · ᛐᛁᛐ ᛆᛘᛁᚱᛁᚴᛆᚿᛌᚴᛁ ᛒᚢᚱᚭᛁᛐ ᚠᚢᚱ ᚴᚢᛒᛁᚱᛐᚱᚢᚴᚴᛚᛁᛁᚴ ᚢᚴ ᛁᚿᚠᚱᛆᛌᛐᚱᚢᚴᛐᚢᚱᛐᚱᚢᚴᚴᛚᛁᛁᚴ ·

ᛌᛆᛘᛒᚢᚿᛐᚿᛁ ᛌᛁᚴᚿᛆᛚ

ᛌᛆᛘᛒᚢᚿᛐᚿᛁ ᚠᚱᛆᛘᛌᚢᚿ

ᛌᛆᛘᛒᚢᚿᛐᚿᛁ ᛌᚴᛁᚿᛆᚱᛁᚢ