<?xml version="1.0" encoding="UTF-8"?>
<page>
  <sourceCitations></sourceCitations>
  <contentStorage>postgres</contentStorage>
  <sameNames></sameNames>
  <basedOn></basedOn>
  <title>Software Security</title>
  <description>Software security is concerned with building security into software by established rules during development and with handling exploitable vulnerabilities during maintenance.</description>
  <url>/en/concepts/software-security/at/2.html</url>
  <entity>
    <perspectives></perspectives>
    <customFields></customFields>
    <rankingTiers></rankingTiers>
    <rankingColumns></rankingColumns>
    <rankingEntries></rankingEntries>
    <id>concept_software_security</id>
    <type>concept</type>
    <title>Software Security</title>
    <slug>software-security</slug>
    <aliases>
      <alias>软件安全</alias>
    </aliases>
    <previousSlugs></previousSlugs>
    <summary>Software security is concerned with building security into software by established rules during development and with handling exploitable vulnerabilities during maintenance.</summary>
    <status>published</status>
    <categories>
      <category>category-science-technology</category>
    </categories>
    <tags></tags>
    <sources>
      <source>
        <id>s1</id>
        <title>Guide to the Software Engineering Body of Knowledge (SWEBOK Guide) v4.0a</title>
        <author>Hironori Washizaki (ed.), IEEE Computer Society</author>
        <date>2026-08</date>
        <url>https://ieeecs-media.computer.org/media/education/swebok/swebok-v4.pdf</url>
        <locator>Chapter 13</locator>
      </source>
    </sources>
    <createdAt>2026-11-02T01:19:55+08:00</createdAt>
    <updatedAt>2026-11-02T01:19:55+08:00</updatedAt>
    <updatedBy>user:admin</updatedBy>
    <revision>2</revision>
    <body>Because of misuse and increasing malicious activity against computer systems, developers must address security in addition to correctness and reliability. Secure software development follows a set of established or recommended rules and practices. Secure software maintenance avoids introducing security problems during maintenance and handles identified vulnerabilities during the life cycle. Vulnerabilities are introduced not only during development but also by third-party components such as libraries, commercial off-the-shelf software, or an operating system. The Guide holds that designing security into software is preferable to patching it in after development, so every life-cycle stage has to be considered.[^s1]&#xA;&#xA;&#xA;The Guide&#39;s top-level topics for this knowledge area are:&#xA;&#xA;- Software Security Fundamentals&#xA;- Security Management and Organization&#xA;- Software Security Engineering and Processes&#xA;- Security Engineering for Software Systems&#xA;- Software Security Tools&#xA;- Domain-Specific Software Security</body>
    <url>/concepts/software-security.html</url>
    <lang>en</lang>
    <availableLangs>
      <lang>zh</lang>
      <lang>en</lang>
    </availableLangs>
    <occupations></occupations>
    <conceptKind>theme</conceptKind>
    <scopeNote>One knowledge area of SWEBOK Guide v4.0a.</scopeNote>
    <creators></creators>
    <relatedTerms></relatedTerms>
  </entity>
  <entities></entities>
  <tags></tags>
  <categories></categories>
  <relations>
    <relation>
      <id>relation_software_engineering_broader_than_software_security</id>
      <fromId>concept_software_engineering</fromId>
      <relationType>broader_than</relationType>
      <toId>concept_software_security</toId>
      <sourceRefs>
        <sourceRef>
          <entityId>concept_software_engineering</entityId>
          <sourceId>s1</sourceId>
        </sourceRef>
      </sourceRefs>
      <label>Broader concepts</label>
      <targetId>concept_software_engineering</targetId>
      <targetTitle>Software Engineering</targetTitle>
      <targetUrl>/en/concepts/software-engineering.html</targetUrl>
      <incoming>true</incoming>
    </relation>
  </relations>
  <mentions></mentions>
  <toc></toc>
  <askCitations></askCitations>
  <history></history>
  <versions>
    <revision>
      <revision>2</revision>
      <updatedAt>2026-11-02T01:19:55+08:00</updatedAt>
      <message>当前版本</message>
      <hasSnapshot>true</hasSnapshot>
      <url>/en/concepts/software-security/at/2.html</url>
    </revision>
  </versions>
  <relationGroups></relationGroups>
  <viewRevision>2</viewRevision>
  <lang>en</lang>
  <availableLangs>
    <lang>zh</lang>
    <lang>en</lang>
  </availableLangs>
  <infoFields>
    <field>
      <key>concept_kind</key>
      <label>Concept kind</label>
      <value>Theme</value>
    </field>
    <field>
      <key>aliases</key>
      <label>Aliases</label>
      <value>软件安全</value>
    </field>
    <field>
      <key>scope_note</key>
      <label>Scope note</label>
      <value>One knowledge area of SWEBOK Guide v4.0a.</value>
    </field>
  </infoFields>
  <relationsTotal>1</relationsTotal>
  <relationCounts>
    <count>
      <relationType>broader_than</relationType>
      <incoming>true</incoming>
      <label>Broader concepts</label>
      <total>1</total>
    </count>
  </relationCounts>
  <rankings></rankings>
  <rankingBadges></rankingBadges>
</page>