 |
Our conclusion are: A large number of open source software is widely used in software development, it causes more probabilities to have vulnerabilities exist and difficult to detect.
It is not secure enough if only follow the individual industry certification standards. For example: you might follow ETSI EN 303 645 and pass the testing. However, it might not be trustworthy because that the library you employed might not be safe. Nowadays, the software structure become more complex, so the waterfall could not fit the rapid need. So the NIST recommends change the development phases to processes. The users can define which processes should be employed to the development life cycle by the users¡¯ need. However, this makes the design and development of the platform more difficulty. In addition to, the devices rapid needed because of the Massive Machine Type Communications (mMTC) characteristics of 5G. The operation system and the language are diverse. It¡¯s difficult to defect the vulnerabilities. |
IEEE/ICACT20220036 Slide.18
[Big Slide]
[YouTube]