Software Transparency: Supply Chain Security in an Era of a Software-Driven Society
暫譯: 軟體透明度：軟體驅動社會時代的供應鏈安全
Hughes, Chris, Turner, Tony, Friedman, Allan
商品描述
Discover the new cybersecurity landscape of the interconnected software supply chain
In Software Transparency: Supply Chain Security in an Era of a Software-Driven Society, a team of veteran information security professionals delivers an expert treatment of software supply chain security. In the book, you'll explore real-world examples and guidance on how to defend your own organization against internal and external attacks. It includes coverage of topics including the history of the software transparency movement, software bills of materials, and high assurance attestations.
The authors examine the background of attack vectors that are becoming increasingly vulnerable, like mobile and social networks, retail and banking systems, and infrastructure and defense systems. You'll also discover:
- Use cases and practical guidance for both software consumers and suppliers
- Discussions of firmware and embedded software, as well as cloud and connected APIs
- Strategies for understanding federal and defense software supply chain initiatives related to security
An essential resource for cybersecurity and application security professionals, Software Transparency will also be of extraordinary benefit to industrial control system, cloud, and mobile security professionals.
商品描述(中文翻譯)
探索互聯軟體供應鏈全新的網路安全格局
《Software Transparency: Supply Chain Security in an Era of a Software-Driven Society》由一群資深資訊安全專業人士撰寫，深入探討軟體供應鏈安全。在本書中，您將了解真實世界的案例，以及如何防禦內部與外部攻擊、保護您所屬的組織。本書涵蓋軟體透明化運動的歷史、軟體物料清單（software bills of materials, SBOM），以及高保證性認證（high assurance attestations）等主題。
作者探討行動裝置與社群網路、零售與銀行系統，以及基礎設施與國防系統等攻擊向量的背景；這些攻擊向量正變得日益脆弱。您還將了解：
• 軟體消費者與供應商皆適用的使用案例與實務指南
• 韌體與嵌入式軟體，以及雲端與互聯 API
• 了解與安全性相關之聯邦政府與國防軟體供應鏈倡議的策略
《Software Transparency》是網路安全與應用程式安全專業人士不可或缺的資源，對工業控制系統、雲端及行動安全專業人士而言，也將帶來極大的助益。
作者簡介
CHRIS HUGHES is the co-founder and Chief Information Security Officer of Aquia. He is an Adjunct Professor for M.S. Cybersecurity programs at Capitol Technology University and the University of Maryland Global Campus, and a co-host of the Resilient Cyber Podcast.
TONY TURNER has 25 years' experience as a cybersecurity engineer, architect, consultant, executive, and community builder. He is the Founder of Opswright, a software company creating solutions for security engineering in critical infrastructure and leads the OWASP Orlando chapter.
作者簡介(中文翻譯)
CHRIS HUGHES 是 Aquia 的共同創辦人兼 Chief Information Security Officer。他是 Capitol Technology University 與 University of Maryland Global Campus 網路安全碩士課程的兼任教授，也是 Resilient Cyber Podcast 的共同主持人。
TONY TURNER 擁有 25 年擔任網路安全工程師、架構師、顧問、主管及社群建立者的經驗。他是 Opswright 的創辦人。Opswright 是一家為關鍵基礎設施安全工程打造解決方案的軟體公司；此外，他也領導 OWASP Orlando 分會。
