应对软件保障与供应链风险管理的挑战.pdf

1、Secure by Design Workshop 2024 Carnegie Mellon University1DISTRIBUTION STATEMENT A This material has been approved for public release and unlimited distribution 2024 Carnegie Mellon UniversityDISTRIBUTION STATEMENT A This material has been approved for public release and unlimited distributionAUGUST

2、 6,2024Carol Woody,PhDMeeting Challenges of Software Assurance and Supply Chain Risk ManagementSecure by Design Workshop 2024 Carnegie Mellon University2DISTRIBUTION STATEMENT A This material has been approved for public release and unlimited distributionDocument MarkingsCopyright 2024 Carnegie Mell

3、on University.The view,opinions,and/or findings contained in this material are those of the author(s)and should not be construed as an official Government position,policy,or decision,unless designated by other documentation.NO WARRANTY.THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING INSTITU

4、TE MATERIAL IS FURNISHED ON AN AS-IS BASIS.CARNEGIE MELLON UNIVERSITY MAKES NO WARRANTIES OF ANY KIND,EITHER EXPRESSED OR IMPLIED,AS TO ANY MATTER INCLUDING,BUT NOT LIMITED TO,WARRANTY OF FITNESS FOR PURPOSE OR MERCHANTABILITY,EXCLUSIVITY,OR RESULTS OBTAINED FROM USE OF THE MATERIAL.CARNEGIE MELLON

5、UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND WITH RESPECT TO FREEDOM FROM PATENT,TRADEMARK,OR COPYRIGHT INFRINGEMENT.DISTRIBUTION STATEMENT A This material has been approved for public release and unlimited distribution.Please see Copyright notice for non-US Government use and distribution.This

6、 material may be reproduced in its entirety,without modification,and freely distributed in written or electronic form without requesting formal permission.Permission is required for any other use.Requests for permission should be directed to the Software Engineering Institute at permissionsei.cmu.ed