08/29/2026
NYU Tandon has launched the NYU Software Supply Chain Security Operations Center (NSOC), a new initiative in the NYU Center for Cybersecurity (CCS) whose centerpiece is a one-year program that embeds Tandon master’s students directly in the open-source communities that maintain critical software infrastructure.
"There is simply not enough security expertise, tooling, or guidance to tackle the scale of this problem," said Justin Cappos, professor at NYU Tandon and founder of NSOC, who has developed a collection of widely-used software supply chain security technologies including TUF, Uptane, gittuf, and in-toto. "The only way to actually close that gap is to train the people who can fill it, and to train them by putting them directly into the communities that need the help."
Cappos co-founded NSOC with Jiahao Yu, a professor at NYU Abu Dhabi focused on AI-driven vulnerability discovery, alongside external collaborators Andrew Nesbitt of ecosyste.ms and Vlad-Stefan Harbuz of the Software Stewardship Lab and Open Source Pledge.
https://buff.ly/crTKymx