School of Computing Science

Our ACM CCS paper: 'An Empirical Study of Observability Limits in Advanced Software Supply Chain Attacks' has been accepted in ACM CCS 2026, November 15-19, 2026, Hague, The Netherlands.

The paper reveals fundamental observability limits in advanced software supply-chain attacks, showing that single-source telemetry captures fewer than 40% of attack steps. It introduces SynthChain, a multi-source benchmark with seven realistic attack scenarios and chain-level ground truth for evaluating detection and forensic reconstruction. 


First published: 19 July 2026