Architectural Solution Integration to contain ICT supply chain threats

Information Communication Technology, which has been more and more critical in the modern economy and society, means more than information technology and traditional telecommunications. The integrity of ICT supply chain has slightly different meaning than the traditional security and assurance. Partly for the sake of difficulties to technically testify the increasingly complicated modern ICT products, it´s by no means to figure out an end to end integrity assurance program and methodology, letting alone test cost and timing factors. This paper investigates the threats of ICT supply chain integrity, particularly covert channel. An architectural approach, named as Architectural Solution Integration, is given out to assure the integrity of ICT system and contain the potential threats through supply chains. The quantitative assessment of ICT supply chain integrity is discussed as well, followed by the future work analysis.