悬镜DevSecOps智适应威胁管理解决方案  

DevSecOps AI-Adaption Threat Management Solution

作　　者：孙嘉杰 张博 董毅 张涛 SUN Jiajie;ZHANG Bo;DONG Yi;ZHANG Tao(Beijing Anpro Information Technology Co.,Ltd.,Beijing 100193,China)

机构地区：[1]北京安普诺信息技术有限公司,北京100193

出　　处：《信息安全与通信保密》2020年第S01期74-80,共7页Information Security and Communications Privacy

摘　　要：悬镜DevSecOps智适应威胁管理解决方案,是悬镜安全自主研发的DevSecOps软件供应链全生命周期的高级威胁检测防御体系,为客户提供包括威胁建模、风险发现、威胁模拟、检测响应在内的全生命周期安全解决方案,覆盖编码阶段、测试阶段、预发布阶段、发布阶段、线上运维阶段。本方案强调自动化与一体化,可将安全融合于由CI/CD平台构建的DevOps体系,实现将安全贯穿从开发到运营整个业务生命周期每一个环节,是一种低侵入、高效率、全覆盖的新一代突破性威胁管理解决方案。Xmirror DevSecOps AI-Adaption Threat Management solution is a advanced threat detection&defense system of whole life cycle of the DevSecOps software supply chain,which is independent research and development by Xmirror,providing customers with the whole life cycle of security solutions include threat modeling,threat detection,threat simulation,detection response.This solution covers the coding phase,testing phase,pre-release phase,publishing phase,operations phase.It emphasizes automation and integration.It integrates security into DevOps system built by CI/CD platform.It implements that security runs through the whole software life cycle from development to operation,which is low invasion,high efficiency and full coverage.This is a breakthrough new generation threat management solution.

关 键 词：研发安全运营一体化 威胁检测 深度学习 威胁管理 人工智能渗透测试 

分 类 号：TN915.08[电子电信—通信与信息系统]