关键词: 网络安全, 供应链攻击, 防护应对, 安全框架

Abstract: In recent years, with the rapid development of digital era, key infrastructure and important resources are increasingly dependent on the supply chain. Internet criminals and hackers have also found that the supply chain is filled with available vulnerabilities. Many governments have expressed their concern about the integrity and vulnerability of the supply chain. This paper analyzes the principles and detection difficulties of APT supply chain attacks, and draws on the measures taken by governments and foreign enterprises from various countries.

Key words: network security, supply chain attack, protective response, security framework