<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Sectrend的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Sectrend</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Sectrend]]></copyright><item><title><![CDATA[重磅 | 程序分析领域知名科学家周迪之博士出任安势信息CTO！AI Native 赋能新一代 CleanCode SAST]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/158424490</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/158424490</guid><author>Sectrend</author><pubDate>Thu, 26 Feb 2026 14:46:53 +0800</pubDate><description><![CDATA[重磅 | 程序分析领域知名科学家周迪之博士出任安势信息CTO！AI Native 赋能新一代 CleanCode SAST]]></description><category></category></item><item><title><![CDATA[安势信息受邀参加COSCon‘25 第十届中国开源年会｜「4D开源组件评估模型+清源SCA」，精准锁定权威组件，守护软件供应链！]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/155855333</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/155855333</guid><author>Sectrend</author><pubDate>Fri, 12 Dec 2025 14:28:28 +0800</pubDate><description><![CDATA[安势信息受邀参加COSCon'25 第十届中国开源年会｜「4D开源组件评估模型+清源SCA」，精准锁定权威组件，守护软件供应链！]]></description><category></category></item><item><title><![CDATA[再获殊荣！安势信息荣登「2025中国科创好公司-人工智能好公司」榜单，登顶智能软件研发赛道！]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/155850169</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/155850169</guid><author>Sectrend</author><pubDate>Fri, 12 Dec 2025 12:01:59 +0800</pubDate><description><![CDATA[再获殊荣！安势信息荣登「2025中国科创好公司-人工智能好公司」榜单，登顶智能软件研发赛道！]]></description><category></category></item><item><title><![CDATA[开源重塑金融服务新生态｜《2025年金融服务开源现状报告》深度解读与实践路径]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/154655973</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/154655973</guid><author>Sectrend</author><pubDate>Mon, 10 Nov 2025 18:09:31 +0800</pubDate><description><![CDATA[2025年金融服务开源现状报告》清晰地表明，开源已成为金融服务行业数字化转型的必选项，而非可选项。从治理规范化到价值多元化，从技术聚焦到社区协同，金融开源正迈入高质量发展的新阶段。但安全合规风险、技能缺口、价值量化困难等挑战，仍需要专业的产品与解决方案提供支撑。]]></description><category></category></item><item><title><![CDATA[安势清源SCA助力赛事！开源小满EasyXMen轻量级性能指标实时监控系统挑战赛决赛名单揭晓，巅峰对决即将开启！]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/154523285</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/154523285</guid><author>Sectrend</author><pubDate>Fri, 07 Nov 2025 10:35:17 +0800</pubDate><description><![CDATA[安势清源SCA助力赛事！开源小满EasyXMen轻量级性能指标实时监控系统挑战赛决赛名单揭晓，巅峰对决即将开启！]]></description><category></category></item><item><title><![CDATA[官网焕新！安势信息以全新形象，解码软件供应链安全流畅体验！]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/153731075</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/153731075</guid><author>Sectrend</author><pubDate>Wed, 22 Oct 2025 13:27:00 +0800</pubDate><description><![CDATA[​上海安势信息技术有限公司的新版官网已正式推出！https://www.sectrend.com.cn/]]></description><category></category></item><item><title><![CDATA[欧洲开源生态启示：从技术工具到战略主权，网络安全与 AI 驱动下的转型之路]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/153727408</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/153727408</guid><author>Sectrend</author><pubDate>Wed, 22 Oct 2025 11:09:37 +0800</pubDate><description><![CDATA[想知道欧洲如何靠开源应对地缘政治挑战、破解网络安全难题？戳原文👉]]></description><category></category></item><item><title><![CDATA[安势信息亮相 2025vivo 开发者大会，多维度技术共推生态安全升级！]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/153183053</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/153183053</guid><author>Sectrend</author><pubDate>Mon, 13 Oct 2025 10:40:11 +0800</pubDate><description><![CDATA[安势信息连续三年斩获“vivo 年度最佳安全业务伙伴”荣誉称号]]></description><category></category></item><item><title><![CDATA[IT、安全团队总扯皮？用SBOM管技术债，打破部门墙，存量资产风险降一半！]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/152927841</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/152927841</guid><author>Sectrend</author><pubDate>Fri, 10 Oct 2025 15:38:39 +0800</pubDate><description><![CDATA[当企业通过 SBOM（软件物料清单）初步掌握了软件资产的“成分表”后，那已有的存量软件资产该如何有效管控？长期累积的“技术债”又该如何安全化解？]]></description><category></category></item><item><title><![CDATA[深度解析 | CISA 发布 2025 版 SBOM 最基本要素：软件供应链安全进入新阶段]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/152046462</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/152046462</guid><author>Sectrend</author><pubDate>Wed, 24 Sep 2025 17:30:02 +0800</pubDate><description><![CDATA[美国CISA发布《软件物料清单(SBOM)最基础要素》2025版更新草案，这是自2021年NTIA标准以来的重大升级。新规强化了组件哈希值、许可证信息等关键字段，要求SBOM覆盖所有依赖项并区分&quot;已知未知&quot;信息。随着欧盟CRA法案、FDA新规等全球监管要求落地，SBOM正从可选实践转变为软件市场准入的强制要求。新标准特别关注SaaS和AI系统的特殊需求，同时强调SBOM与VEX等安全公告的联动，实现精准漏洞管理。中国企业需把握标准升级机遇，将SBOM纳入CI/CD流程，构建可信的软件供应]]></description><category></category></item><item><title><![CDATA[《2025 年 OSPO 现状与开源管理报告》深度洞察｜软件供应链安全与合规治理的关键抓手]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/151800112</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/151800112</guid><author>Sectrend</author><pubDate>Wed, 17 Sep 2025 18:17:07 +0800</pubDate><description><![CDATA[作为专注 AI+软件供应链安全与合规治理的厂商，这期，安势信息将结合报告数据与行业实践，从技术落地与商业价值视角，解读 OSPO 如何成为企业应对供应链风险、实现开源价值最大化的战略抓手。]]></description><category></category></item><item><title><![CDATA[清源 SCA 社区版更新（V4.2.0）｜漏洞前置感知、精准修复、合规清晰，筑牢软件供应链安全防线！]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/151359440</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/151359440</guid><author>Sectrend</author><pubDate>Tue, 09 Sep 2025 13:44:45 +0800</pubDate><description><![CDATA[📢 清源SCA社区版V4.2.0重磅升级！软件供应链安全痛点？这次解决了！
👉 漏洞早30天预警，CSSA独家体系帮你防0day攻击；  
👉 修复建议精准到代码行，兼容性分级避免升级踩坑；  
👉 安全与合规风险拆开管，筛选效率直接翻倍；
👉 操作流程可视化，小白也能轻松上手～  
从漏洞感知到修复管理，全链路优化，企业/研发/运维都能用！]]></description><category></category></item><item><title><![CDATA[AI写代码时代，赢的不是写得快的企业，而是懂这个规则的...]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/151321975</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/151321975</guid><author>Sectrend</author><pubDate>Mon, 08 Sep 2025 14:33:27 +0800</pubDate><description><![CDATA[AI写代码的「盛宴」与「隐雷」：代码能跑就行？合规才能赢]]></description><category></category></item><item><title><![CDATA[安势信息亮相openkylin开发者大会，以“白银捐赠人”身份，共同推动开源安全与合规生态健康持续发展]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/150949708</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/150949708</guid><author>Sectrend</author><pubDate>Thu, 28 Aug 2025 13:32:03 +0800</pubDate><description><![CDATA[安势信息亮相openkylin开发者大会，以“白银捐赠人”身份，共同推动开源安全与合规生态健康持续发展。
]]></description><category></category></item><item><title><![CDATA[别让代码毁了低空经济！80%风险藏在第三方组件里]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/150577034</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/150577034</guid><author>Sectrend</author><pubDate>Thu, 21 Aug 2025 10:43:22 +0800</pubDate><description><![CDATA[一架无人机的飞控系统、通信协议、云端管理平台，可能依赖成百上千个开源组件和第三方代码。只要其中一个组件被植入恶意程序，或者存在未修复的漏洞，就可能让整架无人机失控，甚至波及整个低空交通网络！]]></description><category></category></item><item><title><![CDATA[SCA让每一次漏洞判定皆有代码为证]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/149420186</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/149420186</guid><author>Sectrend</author><pubDate>Thu, 17 Jul 2025 13:57:31 +0800</pubDate><description><![CDATA[清源SCA社区版｜每一次漏洞判定皆有代码为证]]></description><category></category></item><item><title><![CDATA[清源SCA开源版7月即将发布｜开源安全破局！97%代码暗藏风险，这款轻量化SCA神器免费开源，一键扫描四大隐患]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/148713923</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/148713923</guid><author>Sectrend</author><pubDate>Tue, 17 Jun 2025 14:00:43 +0800</pubDate><description><![CDATA[安势信息将于7月上线【清源 SCA 开源版】，赋能开发者、中小型企业、合规/知产服务机构、OSPO及开源社区，打造开放、普惠的软件成分分析能力，降低安全门槛，激发创新活力，共建更安全、更合规的开源软件生态。]]></description><category></category></item><item><title><![CDATA[最易受攻击的五大开源组件！这些组件你用了吗？]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/135676513</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/135676513</guid><author>Sectrend</author><pubDate>Thu, 18 Jan 2024 15:48:58 +0800</pubDate><description><![CDATA[本文为大家简单介绍了亚洲地区最易受攻击的五大开源组件，然而就不完全数据显示，很多大型企业的代码中开源代码占据了超过了50%的比例，相信这远远不止五个组件。]]></description><category></category></item><item><title><![CDATA[AIGC的狂欢，代码安全的隐患。]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/135676306</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/135676306</guid><author>Sectrend</author><pubDate>Thu, 18 Jan 2024 15:45:11 +0800</pubDate><description><![CDATA[放眼全球，在欧美地区Github Copilot甚至已经成为欧美程序员标配，这足以体现AIGC的强大生命力。但使用AIGC，却将AIGC代码安全问题抛诸脑后的企业比比皆是，这不得不引起我们的重视。]]></description><category></category></item><item><title><![CDATA[谁说SCA只能给程序员用？清源SCA助力法务人员管理代码合规风险！]]></title><link>https://blog.youkuaiyun.com/Sectrend/article/details/135629546</link><guid>https://blog.youkuaiyun.com/Sectrend/article/details/135629546</guid><author>Sectrend</author><pubDate>Tue, 16 Jan 2024 17:09:25 +0800</pubDate><description><![CDATA[SCA工具的存在为企业的漏洞管理能力以及开源代码风险管理带来了极大的价值，但在开源发展的早期，开源代码的合规风险却常常被企业所轻视甚至忽略，最终让企业因此付出了惨痛的代价。【法务人员审核—安全团队审核—返回开发整改】这样的一套流程下来，耗时久，极大降低研发效率，而且多个团队“你来我往”，难免互生嫌隙，都不想再继续推动合规问题或安全问题的解决。而随着近几年开源的发展及开源治理的逐步普及，代码的合规问题也终于受到了大家的重视，【1】A企业是上千人的大规模企业，内部的开发项目繁多，涉及的开源代码量极大。]]></description><category></category></item></channel></rss>