Skip to content

ngtests: ensure tests cover known attacks on package managers #1640

@sechkova

Description

@sechkova

Description of issue or feature request:

The specification lists specific attacks which TUF aims to protect against.
To ensure the code covers all of the attacks and does not introduce regressions it is desirable to identify or, where they don't already exist, create tests that cover each of the attacks the specification is designed to protect against.

  • arbitrary software installation
  • rollback attacks (covered by TrustedMetadataSet?)
  • fast-forward attacks
  • indefinite freeze attacks
  • extraneous dependency attacks
  • mix-and-match attacks
  • wrong software installation
  • malicious mirrors preventing updates

Metadata

Metadata

Assignees

Labels

backlogIssues to address with priority for current development goalstesting

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions