T/CFAS 0001-2019 Abolished Group standards

T/CFAS 0001-2019 Information security technology: Standard for safely using open source software

Publish Date: 2019-12-17 Implement Date: 2020-01-01 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/CFAS 0001-2019

Standard Type: Group standards

Standard Status: Abolished

is_force_gb: no

CCS Name: Data encryption

ICS Name: Comprehensive Application of Information Technology

Publish Date: 2019-12-17

Implement Date: 2020-01-01

Scope

Scope: The main sources of software insecurity are security vulnerabilities caused by errors and defects in the software itself, as well as various attacks carried out through these security vulnerabilities. By using open-source software vulnerability detection and monitoring technologies, we can reduce software security vulnerabilities and effectively resist attacks. This specification mainly regulates various security norms for the use of open-source software, and further describes and stipulates the security issues and related safety norms that need to be paid attention to at different stages, so as to improve the security of open-source software and its ability to resist attacks. Main technical content: The open-source software safety usage specification refers to standardizing the usage process steps and regulating the software maintenance methods from the perspective of open-source software usage, and improving the information security during the use of open-source software through the application of effective means or tools, so as to reduce the information security risks caused by poor software usage habits or triggering security vulnerabilities. Therefore, the open-source software safety usage specification provides a way and method for effectively controlling the information security issues arising from the use of open-source software. The standards included in the open-source software safety usage specification include: a) Defining the open-source software safety usage specification and the requirements related to this specification in the industry; b) Providing direct support, detailed guidelines, and/or explanations for the entire process of establishing, implementing, maintaining, and improving the open-source software safety usage specification; c) Proposing guidelines for the open-source software safety usage specification in specific industries; d) Describing the qualification assessment methods for the open-source software safety usage spec