T/CECC 41-2025 Information security technology, software supply chain software products, detection elements and methods
T/CECC 41-2025 Information security technology, software supply chain software products, detection elements and methods
Basic Information
Scope
Scope: This document specifies the detection elements and methods of software products in the software supply chain. This document is applicable to the evaluation work of third-party testing institutions on the basic information, component information, and security information of software products; Main technical content: The main technical content includes the core elements of the detection elements and methods of software products in the software supply chain: 1. Detection elements: (1) Software product information (2) Software bill of materials (3) Software product compliance information (4) Software source code coding standards (5) Software product code testing requirements; 2. Testing process; 3. Software product detection methods: (1) Software product information collection (2) Software component analysis (3) Software product license compliance detection (4) Software source code coding standards detection (5) Software product safety and quality testing