软件安全性测试技术是互联网时代软件开发商完善软件性能和抵御网络攻击的重要手段,而将安全性(Security)融入开发(Development)和运维(Operations)过程中的理念DevSecOps作为新一代软件开发模式,能够识别软件可能存在的威胁和有效评估...软件安全性测试技术是互联网时代软件开发商完善软件性能和抵御网络攻击的重要手段,而将安全性(Security)融入开发(Development)和运维(Operations)过程中的理念DevSecOps作为新一代软件开发模式,能够识别软件可能存在的威胁和有效评估软件安全性,可将软件安全风险置于可控范围内。于是,以DevOps(Development and Operations)流程为研究起点,梳理DevOps软件开发模式各阶段涉及的软件安全性测试技术,包括源代码审计、模糊测试、漏洞扫描、渗透测试和安全众测技术;收集和分析SCI、EI、SCOPUS、CNKI、CSCD和万方等知名索引库中近三年的相关文献资料,归纳总结以上技术的研究现状,并给出相关测试工具的使用建议;同时针对各技术支撑手段的优缺点,对软件开发模式DevSecOps的未来发展方向进行了展望。展开更多
Countries around the world generally recognize the strategic value of cyberspace.Information and communications technology(ICT)has become one of the key elements in the economic development,national security and compr...Countries around the world generally recognize the strategic value of cyberspace.Information and communications technology(ICT)has become one of the key elements in the economic development,national security and comprehensive strength of countries.It has also become a key battleground of major-power rivalry.China has always attached great importance to developing and governing the cyberspace since it was connected to the internet nearly 30 years ago.The country also recognizes the international importance of cyberspace governance,particularly focusing on its increasingly unbalanced development,inadequate rules and inequitable order,and is committed to addressing the deficit of global cyberspace governance.展开更多
文摘软件安全性测试技术是互联网时代软件开发商完善软件性能和抵御网络攻击的重要手段,而将安全性(Security)融入开发(Development)和运维(Operations)过程中的理念DevSecOps作为新一代软件开发模式,能够识别软件可能存在的威胁和有效评估软件安全性,可将软件安全风险置于可控范围内。于是,以DevOps(Development and Operations)流程为研究起点,梳理DevOps软件开发模式各阶段涉及的软件安全性测试技术,包括源代码审计、模糊测试、漏洞扫描、渗透测试和安全众测技术;收集和分析SCI、EI、SCOPUS、CNKI、CSCD和万方等知名索引库中近三年的相关文献资料,归纳总结以上技术的研究现状,并给出相关测试工具的使用建议;同时针对各技术支撑手段的优缺点,对软件开发模式DevSecOps的未来发展方向进行了展望。
文摘Countries around the world generally recognize the strategic value of cyberspace.Information and communications technology(ICT)has become one of the key elements in the economic development,national security and comprehensive strength of countries.It has also become a key battleground of major-power rivalry.China has always attached great importance to developing and governing the cyberspace since it was connected to the internet nearly 30 years ago.The country also recognizes the international importance of cyberspace governance,particularly focusing on its increasingly unbalanced development,inadequate rules and inequitable order,and is committed to addressing the deficit of global cyberspace governance.