arXiv cs.CR·22d agoPropagation Model for SSC attacks: Why SBOM (tools) don't tell the whole truth#log4j#sbom#software-supply-chainResearch1