基于SBOM的软件安全治理实践  

Practice of Software Security Governance Based on SBOM

作　　者：王戈 郭新海 刘安 丁攀[1,2] 蓝鑫冲 Wang Ge;Guo Xinhai;Liu An;Ding Pan;Lan Xinchong(China Unicom Research Institute,Beijing 100048,China;Next Generation Internet Broadband Service Application National Engineering Research Center,Beijing 100048,China)

机构地区：[1]中国联通研究院,北京100048 [2]下一代互联网宽带业务应用国家工程研究中心,北京100048

出　　处：《邮电设计技术》2023年第8期9-13,共5页Designing Techniques of Posts and Telecommunications

摘　　要：当今高度信息化和数字化时代,软件已经成为人们生活和工作中不可或缺的重要组成部分。随着软件产业的快速发展和安全事件频繁发生,软件自身的安全问题已经成为当下亟待解决的重大问题。针对这一挑战,越来越多的企业和组织开始关注软件安全治理,其中基于SBOM的软件安全治理方案效果显著,得到了越来越多的关注和实践。In today's highly informationized and digitized age,software has become an essential and integral part of people's daily life and work.Due to the fast development of the software industry,and frequent occurrence of security incidents,software security issues have become a major problem that urgently needs to be solved.To address this challenge,more and more enterprises and organizations are focusing on software security governance.Among them,the software security governance solution based on SBOM has shown significant effectiveness and gained more attention and practice.

关 键 词：SBOM 软件供应链 安全治理 开源组件 

分 类 号：TN915.08[电子电信—通信与信息系统]