供应链级别的开源软件及组件复用是当前软件开发的主流模式.该模式避免了重复开发,降低了研发成本,提高了开发效率,但是也不可避免地存在组件的来源未知,成分不清,漏洞不明,许可证违规等问题.为解决上述问题,研究人员提出了软件物料清单...供应链级别的开源软件及组件复用是当前软件开发的主流模式.该模式避免了重复开发,降低了研发成本,提高了开发效率,但是也不可避免地存在组件的来源未知,成分不清,漏洞不明,许可证违规等问题.为解决上述问题,研究人员提出了软件物料清单(software bill of material,SBOM).SBOM详细列出了构成软件的组件及组件之间的关系,揭示了潜在的和已知的威胁,使软件透明化.自提出以来,国内外研究人员针对SBOM的研究主要聚焦在SBOM的现状、应用和工具上,缺少理论化、体系化的研究.综述SBOM的背景、基本概念、生成技术、工具及性能分析、应用、挑战与趋势,并提出融合细粒度安全漏洞感知,许可证冲突检测的SBOM+,以期从概念、技术、工具、应用和发展等方面为SBOM、软件开发、供应链安全等研究人员提供支撑.展开更多
Regarding ISO9001 and CMM Requirements Management as the background,this article analyses the demands of Requirements Management with the techology and methods of Software Requirements Development;presents the Require...Regarding ISO9001 and CMM Requirements Management as the background,this article analyses the demands of Requirements Management with the techology and methods of Software Requirements Development;presents the Requirements Management practice framework,which can be used to promote the software processes capability of software enterprises;establish the Requirements Management of document flow and workfolw.As a result,based on the practice fractice framework,the Requirements Management sub-platform is established as a part of software quality assurance platform based on ISO9000 and CMM.and it can be used to intensify the requirement management and development of software enterprises.展开更多
文摘供应链级别的开源软件及组件复用是当前软件开发的主流模式.该模式避免了重复开发,降低了研发成本,提高了开发效率,但是也不可避免地存在组件的来源未知,成分不清,漏洞不明,许可证违规等问题.为解决上述问题,研究人员提出了软件物料清单(software bill of material,SBOM).SBOM详细列出了构成软件的组件及组件之间的关系,揭示了潜在的和已知的威胁,使软件透明化.自提出以来,国内外研究人员针对SBOM的研究主要聚焦在SBOM的现状、应用和工具上,缺少理论化、体系化的研究.综述SBOM的背景、基本概念、生成技术、工具及性能分析、应用、挑战与趋势,并提出融合细粒度安全漏洞感知,许可证冲突检测的SBOM+,以期从概念、技术、工具、应用和发展等方面为SBOM、软件开发、供应链安全等研究人员提供支撑.
文摘Regarding ISO9001 and CMM Requirements Management as the background,this article analyses the demands of Requirements Management with the techology and methods of Software Requirements Development;presents the Requirements Management practice framework,which can be used to promote the software processes capability of software enterprises;establish the Requirements Management of document flow and workfolw.As a result,based on the practice fractice framework,the Requirements Management sub-platform is established as a part of software quality assurance platform based on ISO9000 and CMM.and it can be used to intensify the requirement management and development of software enterprises.
