软件供应链安全风险的成因分析.pdfVIP

2025年软   件2025

第46卷 第7期SOFTWAREVol. 46, No.7

网络技术与信息安全

软件供应链安全风险的成因分析

潘鹤元韦仕昌谭棽恩

（中国电信股份有限公司广西分公司，广西南宁530028）

摘 要：本文简要阐述了软件供应链的概念及其常见的安全风险类型，重点分析了安全风险形成的原因，分析了应对此

安全风险应当采取的对策。经研究得出，导致软件供应链安全风险形成的原因较多，包括人员缺乏安全意识、网络安全测试不

到位、技术手段落后、缺乏有力监管及各方责任模糊、缺乏协作与信息共享等。为解决上述问题，需采取激发人员基本安全意

识、应用先进的安全保障技术、落实供应链网络安全监管等措施。

关键词：软件供应链；安全风险；成因；对策

中图分类号：TP309 文献标识码：A DOI：10.3969/j.issn.1003-6970.2025.07.054

本文著录格式：潘鹤元,韦仕昌,谭棽恩.软件供应链安全风险的成因分析[J].软件,2025,46(7):178-180

AnalysisoftheCausesofSoftwareSupplyChainSecurityRisks

PANHeyuan,WEIShichang,TANShenen

(ChinaTelecomGuangxiBranch,NanningGuangxi530028)

【Abstract】： This article briefly explains the concept of software supply chain and its common types of security

risks, with a focus on analyzing the causes of security risks and the countermeasures that should be taken to

address them. After research, it has been found that there are many reasons for the formation of software supply chain

security risks, including lack of security awareness among personnel, inadequate network security testing, outdated

technical means, lack of effective supervision and unclear responsibilities of all parties, lack of collaboration and

information sharing, etc. To solve the above problems, measures need to be taken to stimulate personnels basic security

awareness, apply advanced security protection technologies, and implement supply chain network security supervision.

【Keywords】： software supply chain;security risks;causes;countermeasure

0引言据、程序等其中的信息进行非法修改、删除等操作，具