Grayware is the third software supply chain category that Chainguard is blocking by default
The old industry model for software supply chain security has two categories: malware or clean code. Now Chainguard has added grayware, described as software that behaves identically to malware - stealing credentials, uploading data to an external server, monitoring systems - without technically being malicious because the behavior matches its stated purpose.
In the keynote at Chainguard Assemble in Londonthis week, Lorenc gave an example of a package on npm, the public JavaScript package registry, that installs a Chrome extension to automate outbound spam on LinkedIn by lifting the user's own credentials. It isn't malware in the strict sense, since that's what it says it does, but Chainguard's response is to block it by default and let customers opt in to specific exceptions through the policy engine. Chainguard's logic is similar to "potentially unwanted programs" (PUPs) which has been in antivirus for two decades - but in the open...
Copyright of this story solely belongs to diginomica.com. To see the full text click HERE
