华为云的软件供应链安全实践

选自公众号：AI与安全原文链接：mp.weixin.qq.com软件的安全，在研发段，以前叫SDL,后来逐步发展，到DevSecOps，近几年有个更响亮的名字，软件供应链安全。以SolarWinds为代表的供应链攻击，影响越来越大，软件供应链的安全显得越来越重要。华为从大约20多年前就开始引入代码扫描工具，2010年前后引入STRIDE的威胁分析消减方法，并陆续引入各种先进的理念和工具，应该说始终走在产业前边。华为云的流程方法已经从IPD变成DevSecOps,对软件供应链安全有比较完整的实践。主要内容包括以下部分：1、开源软件管理云的生态兼容性，决定了云对开源软件的应用是丰富多样的。据初步统计，华为云直接应用的开源软件超过5000种，如何管理好开源软件，其实是个非常大的挑战，在实际操作中，开源软件的管理是从下边几个方面进行的。严格的选型。对开源软件的选型引入，要考虑很多因素...去小宇宙查看完整单集简介前往小宇宙评论区与主播互动

Episode metadata supplied by the publisher feed · Published Nov 11, 2024

Embed this episode

Attribution link and audio player

Ready to play

华为云的软件供应链安全实践

0:00 4:32

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

CISO Perspectives (public) N2K Networks This season on CISO Perspectives, host Kim Jones explores some of the challenges of leading through uncertainty. We explore the complexity of the changing nature of regulation and working with the federal government, the evolution of privacy and fraud, and how emerging technologies like AI and quantum computing are changing cyber. When you don’t know what questions to ask, you’re afraid to ask, or don’t know who to ask, CISO Perspectives provides the foundation for learning in this brave new world.

Frequently Asked Questions

How long is this episode of 网络安全AI说?

This episode is 4 minutes long.

When was this 网络安全AI说 episode published?

This episode was published on November 11, 2024.

Can I download this 网络安全AI说 episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!