FlagThis

Abstract

Microsoft Corporation (Microsoft) engaged IOActive, Inc. (IOActive) to assess the security threats and risks associated with the Signing Transparency (ST) service, an open platform built on the open-source Confidential Consortium Framework (CCF). The ST service is intended to be implemented within Azure to allow third parties to validate the provenance of the deployed software.