通过因果关系了解软件供应链中的安全挑战.
Aylin Adem1, Erman Çakıt1, Metin Dağdeviren1
1Department of Industrial Engineering, Gazi University, Ankara, Türkiye.
PloS one
|March 5, 2026
概括
软件供应链安全性至关重要. 本研究使用DEMATEL来识别不安全的分发和不充分的监控等关键挑战,揭示了改善软件安全的关键领域.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
- 软件工程 软件工程 软件工程
背景情况:
- 软件供应链 (SSC) 越来越多地成为网络攻击的目标.
- 对SSC的攻击威胁到软件的完整性和安全性.
- 现有的研究往往针对特定的安全问题,而不是障碍之间的相互关系.
研究的目的:
- 识别和分析削弱SSC安全的主要挑战.
- 了解SSC安全障碍之间的因果关系.
- 为提高软件开发中的网络安全策略提供见解.
主要方法:
- 使用决策试验和评估实验室 (DEMATEL) 技术.
- 进行了详细的文献审查,以确定关键挑战.
- 分析了所识别的安全挑战之间的相互依存关系.
主要成果:
- 确定了影响SSC安全的十个关键挑战.
- 确定不安全的软件分发,不充分的持续监控/事件响应以及日益复杂的网络攻击是最重要的挑战.
- 视觉化了这些挑战之间的关系,以突出重点安全工作的领域.
结论:
- 解决SSC安全挑战的根本原因可以带来显著的改善.
- 该研究为决策者提供了实用的见解,以加强网络安全.
- 对于强大的软件供应链安全来说,优先考虑对已识别的关键挑战的努力至关重要.
相关概念视频
Pharmaceutical Poisoning: Potential Scenarios
47
Pharmaceutical poisoning can occur through various channels, impacting an estimated 2 million hospitalized patients in the U.S. annually with serious adverse drug responses. These scenarios encompass both therapeutic uses, such as drug toxicity, where even standard dosages can lead to severe central nervous system depression, and non-therapeutic exposures, including accidental ingestion by children, and environmental and occupational exposures.Unintentional poisonings often involve exploratory...
47
Distribution Reliability and Automation
547
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
547
Guidelines and Strategies for Safe Computer Charting
3.0K
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
3.0K
Healthcare Associated Infections II: Preventive Measures
4.5K
Essential infection prevention measures are based on the knowledge of the infection chain, the modes of transmission in healthcare settings, and the use of the best practices in all healthcare settings. Compulsory public reporting of healthcare-associated infection rates is needed to allow individuals and the community to make informed choices regarding selecting a healthcare facility.
The best practices for preventing healthcare-associated infections include hand hygiene, patient risk...
The best practices for preventing healthcare-associated infections include hand hygiene, patient risk...
4.5K
Psychological and Sociocultural Causes of Schizophrenia
735
Schizophrenia, a complex psychiatric disorder, has been historically misunderstood. Early psychological theories attributed its origins to childhood trauma and unresponsive parenting. However, contemporary research largely rejects these notions, favoring the vulnerability-stress hypothesis. This model proposes that individuals with a genetic predisposition to schizophrenia may develop the disorder following exposure to significant environmental stressors. Notably, studies on high-risk...
735
Pharmacovigilance
1.9K
Post-marketing surveillance is a critical component of pharmaceutical regulation, often uncovering unanticipated adverse drug reactions (ADRs) once a drug is widely used over an extended period.
This process, termed pharmacovigilance, aims to detect, evaluate, and minimize harmful effects related to medication use. The data collection for pharmacovigilance depends on spontaneous reporting systems, where healthcare professionals or patients voluntarily report suspected ADRs.
In some cases, there...
This process, termed pharmacovigilance, aims to detect, evaluate, and minimize harmful effects related to medication use. The data collection for pharmacovigilance depends on spontaneous reporting systems, where healthcare professionals or patients voluntarily report suspected ADRs.
In some cases, there...
1.9K
