Semiconductor security is a coordination problem
The National Institute of Standards and Technology's (NIST) June 30 framework for analyzing collusion threats in the semiconductor supply chain provides a way to compare threats involving adversaries at different stages of the chain and to reason about security-cost tradeoffs.
Its deeper value is a reminder that supply-chain assurance cannot be reduced to evaluating one supplier at a time.