> Markdown version of [/events/world-congress-2024/sessions/218-how-your-net](https://www.wearedevelopers.com/events/world-congress-2024/sessions/218-how-your-net). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# How your .NET software supply chain is open to attack : and how to fix it


- **Date:** Thursday, Jul 18, 2024
- **Time:** 16:50–17:20 (30 min)
- **Room:** STAGE 2 (500)
- **Event:** World Congress 2024

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/938-how-your-net-software-supply-chain-is-open-to-attack-and-how-to-fix-it)

## Description

Software supply chain attacks can be catastrophic, as seen with the 2020 SolarWinds hack that impacted both the government and private sectors in the United States.

Security researchers have identified that all significant package managers are vulnerable to supply chain attacks, such as typosquatting and dependency confusion. NuGet's default configuration makes it vulnerable by design.

This session will first demonstrate how typosquatting and dependency confusion attacks can compromise .NET supply chains using the default NuGet setup. Then, we will explore effective strategies to secure your NuGet configuration and protect against these threats.


## Speaker

### [Andrei Epure](https://www.wearedevelopers.com/@andrei-epure)

Software Engineering Manager at Sonar


## Related talks at this congress

- [Supply Chain Security - Strategies and Best Practices](https://www.wearedevelopers.com/events/world-congress-2024/sessions/271-supply-chain) — Hendrik Ebbers
- [Programming secure C#/.NET Applications: Dos & Don'ts](https://www.wearedevelopers.com/events/world-congress-2024/sessions/198-programming-secure-c) — Sebastian Leuer
- [Open Source Secure Software Supply Chain in action](https://www.wearedevelopers.com/events/world-congress-2024/sessions/127-open-source-secure) — Natale Vinto
- [How Can My Software Development Be 'Secure by Design'?](https://www.wearedevelopers.com/events/world-congress-2024/sessions/295-how-can-my-software) — Christoph Niehoff