BS ISO IEC 17960-2015 Information technology Programming languages their environments and system software interfaces Code signing for source code《信息技术 程序设计语言及其环境和系统软件接口 源代.pdf
《BS ISO IEC 17960-2015 Information technology Programming languages their environments and system software interfaces Code signing for source code《信息技术 程序设计语言及其环境和系统软件接口 源代.pdf》由会员分享,可在线阅读,更多相关《BS ISO IEC 17960-2015 Information technology Programming languages their environments and system software interfaces Code signing for source code《信息技术 程序设计语言及其环境和系统软件接口 源代.pdf(18页珍藏版)》请在麦多课文档分享上搜索。
1、BSI Standards Publication BS ISO/IEC 17960:2015 Information technology Programming languages, their environments and system software interfaces Code signing for source codeBS ISO/IEC 17960:2015 BRITISH STANDARD National foreword This British Standard is the UK implementation of ISO/IEC 17960:2015. T
2、he UK participation in its preparation was entrusted to Technical Committee IST/5, Programming languages, their environments and system software interfaces. A list of organizations represented on this committee can be obtained on request to its secretary. This publication does not purport to include
3、 all the necessary provisions of a contract. Users are responsible for its correct application. The British Standards Institution 2015. Published by BSI Standards Limited 2015 ISBN 978 0 580 82023 6 ICS 35.060 Compliance with a British Standard cannot confer immunity from legal obligations. This Bri
4、tish Standard was published under the authority of the Standards Policy and Strategy Committee on 30 September 2015. Amendments/corrigenda issued since publication Date T e x t a f f e c t e dBS ISO/IEC 17960:2015 Information technology Programming languages, their environments and system software i
5、nterfaces Code signing for source code Technologies de linformation Langages de programmation, leur environnement et interfaces des logiciels de systmes Signature numrique pour le code source INTERNATIONAL STANDARD ISO/IEC 17960 Reference number ISO/IEC 17960:2015(E) First edition 2015-09-01 ISO/IEC
6、 2015 BS ISO/IEC 17960:2015ii ISO/IEC 2015 All rights reserved COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2015, Published in Switzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanica
7、l, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Ch. de Blandonnet 8 CP 401 CH-1214 Vernier, Geneva, Switz
8、erland Tel. +41 22 749 01 11 Fax +41 22 749 09 47 copyrightiso.org www.iso.org ISO/IEC 17960:2015(E)BS ISO/IEC 17960:2015ISO/IEC 17960:2015(E)Foreword iv Introduction v 1 Scope . 1 2 Conformance . 1 3 Normative references 1 4 T erms and definitions . 2 5 Concepts 3 6 Requirements 4 6.1 General . 4 6
9、.2 Certificates 4 6.3 Hash code. 5 6.4 Initial code signing. 5 6.5 Modifying signed previous versions . 5 6.6 Revision format 5 Annex A (informative) Notional code signing process 6 Bibliography 7 ISO/IEC 2015 All rights reserved iii Contents PageBS ISO/IEC 17960:2015ISO/IEC 17960:2015(E) Foreword I
10、SO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical c
11、ommittee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electr
12、otechnical standardization. The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the different types of ISO documents should be noted. This document was dr
13、afted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives). Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not be held responsible for identifying any or all such patent
14、rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents). Any trade name used in this document is information given for the convenience of users and does not con
15、stitute an endorsement. For an explanation on the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISOs adherence to the WTO principles in the Technical Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information ISO
16、/IEC 17960, was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 22, Programming languages, their environments and system software interfaces.iv ISO/IEC 2015 All rights reservedBS ISO/IEC 17960:2015ISO/IEC 17960:2015(E) Introduction Source code is written
17、and is used in many critical applications. Knowing that the source code being relied upon is the same as that which was used in testing is vital to ensuring the safety and security of a particular application. Given the ease with which source code can be modified, some method of protecting the integ
18、rity and authenticity of the source code is necessary. Sequestration of the source code throughout the supply chain is one possible method, but ensuring protection in that way is impractical and unreliable. Virtual protection through the use of a digital signature offers a practical solution and pro
19、vides integrity and authentication even though the source code may traverse an insecure supply chain. Source code may be modified for legitimate reasons as it moves through the supply chain or over time. Modifications to source code may be made to correct the software or to adapt it for other purpos
20、es. Modifications may only involve changes to a few lines of code and in most cases is not made by the original author or team of authors. Revision control software facilitates tracking of the software changes, but such tracking can easily be spoofed. The use of a digital signature provides a means
21、to restrict the ability to spoof. Digital code signing assigns a responsible party to each revision of the source code and thus can demonstrate the authenticity of the responsible party, the source code and the software changes that have been made between revisions. By doing this, an electronic pedi
22、gree for the source code can be established. This standard specifies the process for signing source code in order to ensure the integrity and authenticity of the source code and a means for rolling back the source code to signed previous versions. Clause 5 provides an overview of the concepts of cod
23、e signing. Conformance requirements for this standard are specified in Clause 6. Annex A is informative and provides a step by step description of a typical application for the standard specified in Clause 6 to assist in understanding code signing. The bibliography lists documents that were referenc
24、ed during preparation of this standard. ISO/IEC 2015 All rights reserved vBS ISO/IEC 17960:2015BS ISO/IEC 17960:2015Information technology Programming languages, their environments and system software interfaces Code signing for source code 1 Scope This International Standard specifies a language-ne
- 1.请仔细阅读文档,确保文档完整性,对于不预览、不比对内容而直接下载带来的问题本站不予受理。
- 2.下载的文档,不会出现我们的网址水印。
- 3、该文档所得收入(下载+内容+预览)归上传者、原创作者;如果您是本文档原作者,请点此认领!既往收益都归您。
下载文档到电脑,查找使用更方便
5000 积分 0人已下载
下载 | 加入VIP,交流精品资源 |
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- BSISOIEC179602015INFORMATIONTECHNOLOGYPROGRAMMINGLANGUAGESTHEIRENVIRONMENTSANDSYSTEMSOFTWAREINTERFACESCODESIGNINGFORSOURCECODE

链接地址:http://www.mydoc123.com/p-396428.html