{
  "contentStorage": "postgres",
  "title": "软件安全",
  "description": "软件安全关注在开发中按既定规则把安全做进软件，并在维护中处理可被利用的漏洞。",
  "url": "/ja/concepts/software-security/at/2.html",
  "entity": {
    "id": "concept_software_security",
    "type": "concept",
    "title": "软件安全",
    "slug": "software-security",
    "aliases": [
      "Software Security"
    ],
    "summary": "软件安全关注在开发中按既定规则把安全做进软件，并在维护中处理可被利用的漏洞。",
    "status": "published",
    "categories": [
      "category-science-technology"
    ],
    "tags": [],
    "sources": [
      {
        "id": "s1",
        "title": "Guide to the Software Engineering Body of Knowledge (SWEBOK Guide) v4.0a",
        "author": "Hironori Washizaki (ed.), IEEE Computer Society",
        "date": "2026-08",
        "url": "https://ieeecs-media.computer.org/media/education/swebok/swebok-v4.pdf",
        "locator": "Chapter 13"
      }
    ],
    "createdAt": "2026-11-02T01:12:52+08:00",
    "updatedAt": "2026-11-02T01:19:55+08:00",
    "updatedBy": "user:admin",
    "revision": 2,
    "body": "由于误用和针对计算机系统的恶意活动增加，开发者除正确性和可靠性外还必须处理安全。安全的软件开发遵循一套既定或推荐的规则与实践。安全的软件维护则避免在维护中引入安全问题，并在生存周期内处理已发现的漏洞。漏洞不只来自开发本身，也来自库、现成商品软件或操作系统等第三方构件。指南认为，在设计时考虑安全，优于开发完成后再打补丁；因此每个生存周期阶段都要考虑安全。[^s1]\n\n\n该知识域在指南中的一级主题为：\n\n- 软件安全基础\n- 安全管理与组织\n- 软件安全工程与过程\n- 软件系统的安全工程\n- 软件安全工具\n- 特定领域的软件安全",
    "url": "/concepts/software-security.html",
    "lang": "ja",
    "fallback": true,
    "availableLangs": [
      "zh",
      "en"
    ],
    "conceptKind": "theme",
    "scopeNote": "按 SWEBOK Guide v4.0a 的一个知识域著录。"
  },
  "entities": null,
  "relations": [
    {
      "id": "relation_software_engineering_broader_than_software_security",
      "fromId": "concept_software_engineering",
      "relationType": "broader_than",
      "toId": "concept_software_security",
      "sourceRefs": [
        {
          "entityId": "concept_software_engineering",
          "sourceId": "s1"
        }
      ],
      "label": "Broader concepts",
      "targetId": "concept_software_engineering",
      "targetTitle": "软件工程",
      "targetUrl": "/ja/concepts/software-engineering.html",
      "incoming": true
    }
  ],
  "versions": [
    {
      "revision": 2,
      "updatedAt": "2026-11-02T01:19:55+08:00",
      "message": "当前版本",
      "hasSnapshot": true,
      "url": "/ja/concepts/software-security/at/2.html"
    }
  ],
  "viewRevision": 2,
  "lang": "ja",
  "availableLangs": [
    "zh",
    "en"
  ],
  "fallback": true,
  "infoFields": [
    {
      "key": "concept_kind",
      "label": "Concept kind",
      "value": "テーマ"
    },
    {
      "key": "aliases",
      "label": "Aliases",
      "value": "Software Security"
    },
    {
      "key": "scope_note",
      "label": "Scope note",
      "value": "按 SWEBOK Guide v4.0a 的一个知识域著录。"
    }
  ],
  "relationsTotal": 1,
  "relationCounts": [
    {
      "relationType": "broader_than",
      "incoming": true,
      "label": "Broader concepts",
      "total": 1
    }
  ]
}