軟件安全基礎(chǔ)課件-展示頁
2025-03-04 17:07本頁面
【正文】 此來幫助我們 :保護(hù)我們的業(yè)務(wù)不會被惡義的家伙破壞 ” 限制責(zé)任和義務(wù) ,滿足法規(guī)和標(biāo)準(zhǔn)避免對公司品牌和聲譽(yù)造成破壞252。 252。 infosec spending ($)incidents exploits ()Know your code. Trust your code? 然而在 事實(shí) 上 : 我們每年都花了數(shù)百萬的資金在信息安全上 ,但是效果并不如意 ,我們遭遇的安全問題越來越多 .infosec spending ($17B)impact ($40B)breaches grow dramatically seriously impacting: uptime, regulatory pliance, liability, brand and reputation信息安全的現(xiàn)狀Know your code. Trust your code分析機(jī)構(gòu)的最近統(tǒng)計(jì) In 2023, average time from vulnerability announcement to 1st attack = days (99 days, 2023) 532% increase in CERT incidents reported (20232023) 43% report an increase in ecrimes and intrusions versus previous year On average, 48 new vulnerabilities per week were disclosed in 1H04These four factoids are just a sampling of results found by the FBI, Carnegie Mellon’s SEI CERT Coordination Center (an industry body that focuses on alerting corporations of security vulnerabilities), and Symantec in its 5th Inter Security Threat Report (Jan June 2023). Know your code. Trust your code軟件安全漏洞的發(fā)展趨勢Know your code. Trust your codeCERT 2023年的報(bào)告Know your code. Trust your code? 我們的錢花在哪兒去了 ?? 為什么我們的安全工作毫無效果 ?Why?Know your code. Trust your code傳統(tǒng)信息安全的方法和投資方向 Know your code. Trust your codeThe experts are telling us: we have a SOFTWARE problem“Over 70% of security vulnerabilities exist at the application layer, not the work layer. It’s not just operating systems or web browsers, but all types of applications particularly applications that automate key business processes.”Gartner Group 2023 軟件安全在信息安全中的重要地位 Know your code. Trust your code結(jié) 論目前我們信息安全的主要問題是：應(yīng)用軟件安全問題 !!!Know your code. Trust your code軟件安全越來越嚴(yán)重的原因? 為什么軟件安全問題日益增長? 黑客攻擊方式的進(jìn)化? 傳統(tǒng)的分層保護(hù)方案減輕系統(tǒng)的風(fēng)險(xiǎn)? 為什么傳統(tǒng)的基于網(wǎng)絡(luò)的方案不工作? 黑客可直接利用軟件的弱點(diǎn)達(dá)到攻擊系統(tǒng)? 演示如何通過攻擊軟件達(dá)到竊取商業(yè)信息和破壞應(yīng)用系統(tǒng)。Know your code. Trust your code為什么軟件安全問題增長? Connectivity（互聯(lián)性）? Extensibility（延展性）? Complexity （復(fù)雜性）Know your code. Trust your code為什么軟件安全問題變得如此困難 ?? Connectivity– The Inter is everywhere and most software is on it? Complexity– Networked, distributed, mobile code is hard? Extensibility– Systems evolve in unexpected ways and are changed on the flyThis simple interface……is this plex The work is the puter.Know your code. Trust your c
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號-1