软件代码质量治理  

Software Code Quality Governance

作　　者：刘海峰 林麟 LIU Haifeng;LIN Lin(Guoneng Netcom Technology(Beijing)Co.,Ltd.,Beijing 100011)

机构地区：[1]国能网信科技(北京)有限公司,北京100011

出　　处：《软件》2023年第6期107-109,共3页Software

摘　　要：近年来,公司不断加强信息安全体系和能力建设,其中一项重要内容是动态及时维护信息资产及资产价值,以此为依据对信息资产风险进行评估,并采取措施规避、降低资产面临的威胁和脆弱性(漏洞)。研发部需要找到适合部门的管理及技术手段,提升部门的安全能力建设,同时结合自身面临的复杂局面,从提升全体员工安全意识到代码审核和制定部门制度,来全面提升集团的信息安全体系和能力建设。In recent years,the Company has continuously strengthened its information security system and capacity building.One of the important contents is to dynamically and timely maintain information assets and asset values,evaluate information asset risks on this basis,and take measures to avoid and reduce the threats and vulnerabilities(loopholes)faced by assets.The R&D department needs to find the management and technical means suitable for the department to improve the security capability of the department.At the same time,in combination with the complex situation faced by itself,it should comprehensively improve the information security system and capacity building of the group from improving the security awareness of all staff to code review and formulating department systems.

关 键 词：代码质量 质量治理 代码审计 SONAR 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]