Software supply chain security detection integrated management platform

Abstract

The invention discloses a software supply chain security detection comprehensive management platform, belongs to the field of software supply chains, and aims to solve the problems that when a user downloads software, the software is generally directly downloaded by an existing software supply chain security management platform, but the user runs a program on a computer, so that the software cannot be directly downloaded. In order to solve the problem that the installation and the use of the software are influenced by malicious attacks on the software when a user downloads the software due to the fact that the viruses are possibly implanted in the programs, the system comprises a vulnerability scanning and detection module, a detection module for binding the software is downloaded when the user downloads the software, and a computer of the user is detected; according to the method, whether malicious software viruses used during environment evaluation exist or not is judged, data of the malicious software viruses are fed back to the terminal for analysis, a suggestion whether installation can be conducted or not is given to a user, known malicious software is shielded, and therefore the purpose that the software can be better protected is achieved.

Description

Technical Field

[0001] The present invention relates to the field of software supply chain, and in particular to a software supply chain security detection integrated management platform. Background Art

[0002] The software supply chain security testing integrated management platform is a comprehensive management system designed specifically to ensure the security of the software supply chain.

[0003] The patent with announcement number CN117077145A discloses a software supply chain security management platform implemented by an enterprise, including: a platform server and a client, which are used to install and deploy the downloaded client on the scanned host, and start the scanning program. The IP scanning segment to be scanned is configured in the IP range configuration interface of the platform server. The scanner client program will patrol and request the platform server configuration information to obtain relevant instructions: When the user downloads the software, the existing software supply chain security management platform does not provide instructions for determining whether to install it, which can easily lead to the downloaded software being attacked directly. At the same time, when the software is downloaded to the end, it is found that it cannot be installed.

[0004] In order to solve the above problems, a software supply chain security detection integrated management platform is proposed. Summary of the invention

[0005] The purpose of the present invention is to provide a software supply chain security detection integrated management platform to solve the problem that users run programs on their computers, which may be implanted with viruses and maliciously attack the software when the user downloads it, affecting the installation and use of the software.

[0006] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: a software supply chain security detection integrated management platform, including a vulnerability scanning and detection module: used to perform comprehensive vulnerability scanning on each link in the software supply chain, detect potential security vulnerabilities, code vulnerabilities, configuration errors, improper permission management, and provide detailed vulnerability reports; The computer performance detection formula in the vulnerability scanning and detection module is: Computer performance comprehensive index CPI = α × CPU performance score + β × memory performance score + γ × hard disk performance score +; Among them, α, β, and γ are weight coefficients, which can be adjusted according to the degree of software dependence on different performance indicators. The CPU performance score can be determined by comprehensively considering the CPU usage rate and clock frequency factors; the memory performance score can be determined according to the memory occupancy rate and memory read and write speed; the hard disk performance score can be determined according to the hard disk space and read and write speed; The formula for determining whether the user has installed antivirus software in the vulnerability scanning and detection module is: Installation Feasibility Index (IFI) formula: IFI=f(antivirus software status, CPI); IFI=A×antivirus software status value+B×CPI, where the antivirus software status value is 0 (off) or 1 (on), and A and B are coefficients; Post-installation risk index (PRI) formula: PRI = g (new antivirus software impact value, performance change impact value), PRI=C×impact value of new antivirus software+D×impact value of performance change. The impact value of new antivirus software can be determined based on the security level of the new antivirus software and the degree of conflict with the software. The value range is 0 to 1. The performance change impact value can be determined based on the CPI difference before and after the computer performance change, and the value range is also 0 to 1; C and D are coefficients; Supply chain risk assessment module: evaluates risk factors in the software supply chain, including supplier credibility, software source reliability, and supply chain complexity, determines risk levels, and provides a basis for enterprises to formulate risk management strategies; Security policy management module: formulate and implement software supply chain security policies to ensure that the development, procurement and use of software meet security standards, monitor and audit the implementation of security policies, and promptly discover and correct violations; Incident response and management module: When a security incident occurs, it can respond quickly, conduct incident investigation and analysis, provide emergency response measures, reduce the impact of security incidents on the enterprise, and record and summarize security incidents in order to improve security management measures; User environment assessment module: When a user downloads software, with the user's consent, the module accesses the user's computer to detect whether different antivirus software is on or off, and evaluates the computer's performance. The module also feeds back this data to the enterprise terminal to determine whether the user has installed the software. After installation, the module continuously monitors the user's computer environment. If a new antivirus software appears and causes the installation to fail, the software information that failed to be installed will be sent to the enterprise environment operation terminal. The software provides clear instructions, informing users that the computer environment will be checked during the download process, including the anti-virus software status and computer performance assessment, and explaining the data usage and security measures, and seeking user consent. After the user agrees, the software will start downloading. The software installation package contains a detection module.

[0007] Furthermore, in the software download detection phase: when the software is downloaded, the environment detection module runs to scan the user's computer. The detection module identifies the installed anti-virus software and determines its on or off status by searching for the process name or service name or specific file. At the same time, the computer performance is evaluated to obtain the CPU usage rate, memory occupancy rate, and hard disk read and write speed parameters, and these data are packaged and prepared for transmission to the enterprise terminal; Data transmission and analysis phase: The software sends the detection data to the enterprise server terminal. After receiving the data, the enterprise terminal determines whether the user's computer environment is suitable for installing the software based on the preset rules and algorithms in the vulnerability scanning and detection module and the software's compatibility requirements; User installation phase: The notification of whether the software can be installed or not and the reason are calculated by using the preset rules and algorithms in the vulnerability scanning and detection module; Post-download monitoring phase: After the software is downloaded, it is installed and the detection module is continuously run in the background to trigger the computer environment. If a new antivirus software is detected, its information is recorded. At the same time, the computer performance changes are continuously monitored; Problem feedback stage: New antivirus software causes unsuccessful installation or problems with software operation, and the software status and related data are packaged and transmitted to the enterprise environment operation terminal again.

[0008] Furthermore, the judgment method in the data transmission and analysis stage is: if the computer performance comprehensive index (CPI) ≥ the computer performance comprehensive index threshold and the installation feasibility index (IFI) ≥ the installation feasibility index threshold, it is judged to be suitable for installing the software; If the post-installation risk index (PRI) is ≤ the acceptable threshold of post-installation risk, the post-installation risk is judged to be low; If PRI>PRI risk acceptance threshold, the risk after installation is judged to be high.

[0009] Furthermore, in the supply chain risk assessment module process, the supply chain comprehensive risk index (SCRI) = E × supplier reputation score + F × software source reliability score + G × supply chain complexity score; Among them, E, F, and G are weight coefficients, which can be adjusted according to the degree of importance the company attaches to different risk factors. The supplier credibility score can be determined based on the supplier's historical performance and industry evaluation factors; the software source reliability score can consider the source channel and certification status of the software; the supply chain complexity score can be determined based on the number of links in the supply chain and the geographical scope involved.

[0010] Furthermore, during the user installation phase, when notifying the user of the reasons for installation or non-installation, the formula for helping the user understand the basis for the decision is: Installation Decision Explanation Index (IDI) = H × Antivirus Software Impact + I × Computer Performance Impact; Among them, H and I are coefficients. The impact of antivirus software can be determined based on the relationship between the antivirus software status value and software compatibility. The greater the conflict between antivirus software and software, the higher the impact of antivirus software. The impact of computer performance can be determined based on the gap between CPI and the minimum performance requirement of the software. The larger the gap, the higher the impact of computer performance. This index can be presented to users in the form of a percentage, allowing users to understand the impact of each factor on installation decisions.

[0011] Furthermore, the vulnerability scanning and detection module, supply chain risk assessment module, security policy management module and incident response and management module of the software supply chain security detection integrated management platform cooperate with the user environment assessment module to jointly ensure the security of the software supply chain; The vulnerability scanning and detection module detects potential vulnerabilities of the software in the user environment. The supply chain risk assessment module considers the impact of user environment factors on supply chain risks. The security policy management module formulates security policies for different user environments. The incident response and management module quickly responds and handles problems when they occur in the user environment.

[0012] Furthermore, after receiving the user environment assessment data, the enterprise environment operation terminal of the software supply chain security detection comprehensive management platform stores, analyzes and compiles statistics on the data to provide a basis for software improvement and optimization, and adjusts the software configuration and optimization strategy according to the computer performance and anti-virus software status of different users to improve the compatibility and stability of the software.

[0013] Furthermore, the security policy management module is integrated with security tools and systems to form a more complete security protection system, and is integrated with the enterprise's vulnerability management system, intrusion detection system, and firewall to achieve information sharing and collaborative protection. At the same time, the platform is connected with the software supplier's development management system to provide timely feedback on user environment issues and promote software improvement and optimization.

[0014] Furthermore, the user downloads the software and accesses it with the user's consent to ensure the security and privacy of user data. When conducting user environment assessment, the software uses encrypted transmission and storage technology and strictly abides by relevant laws, regulations and privacy policies. The company has strict authority control over the use and management of user data to prevent data leakage and abuse. At the same time, the company regularly conducts security audits and risk assessments on user data to promptly identify and resolve security risks.

[0015] Furthermore, the software supply chain security detection and integrated management platform also includes a user environment assessment module: it is used to perform an environmental assessment when the user downloads the software, obtain the anti-virus software status and performance data of the user's computer, and determine whether the user has installed the software through formula calculation. If installed, the user installs the software. After installation, the platform continuously monitors the user environment. If any problems occur, timely feedback is provided to the enterprise terminal for processing. Other modules of the platform perform comprehensive security detection and management of the software supply chain to ensure the security and reliability of the software. The modules cooperate with each other to form a complete software supply chain security protection system.

[0016] Compared with the prior art, the present invention has the following beneficial effects: The present invention provides a software supply chain security detection integrated management platform, which is provided with a user environment assessment module. When the user downloads the software, the detection module bundled with the software will be downloaded. The detection module detects the user's computer to see whether there are malicious software viruses used in the environment assessment, and feeds back its data to the terminal for analysis. The user is given advice on whether the software can be installed, and known malicious software is shielded. Compared with the prior art, the possibility of software being attacked is reduced and the possibility of users being unable to install the software after downloading is reduced, thereby achieving the purpose of better protecting the software. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a schematic diagram of the process structure of the present invention. DETAILED DESCRIPTION

[0018] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0019] See also Figure 1 ,The present invention provides a technical solution: a software supply chain security detection and ,integrated management platform including a vulnerability scanning and detection module: used to ,perform a comprehensive vulnerability scan on each link in the software supply chain, detect potential security vulnerabilities, code vulnerabilities, configuration errors, and improper ,authority management, and provide detailed vulnerability reports; The computer performance detection formula in the vulnerability scanning and detection module is: Computer performance comprehensive index CPI = α × CPU performance score + β × memory performance score + γ × hard disk performance score +.

[0020] Among them, α, β, and γ are weight coefficients, which can be adjusted according to the degree of software dependence on different performance indicators. The CPU performance score can be determined by comprehensively considering the CPU usage rate and clock frequency factors; the memory performance score can be determined according to the memory occupancy rate and memory read and write speed; the hard disk performance score can be determined according to the hard disk space and read and write speed; The formula for determining whether the user has installed antivirus software in the vulnerability scanning and detection module is: Installation Feasibility Index (IFI) formula: IFI=f(antivirus software status, CPI); IFI=A×antivirus software status value+B×CPI, where the antivirus software status value is 0 (off) or 1 (on), and A and B are coefficients; Post-installation risk index (PRI) formula: PRI = g (new antivirus software impact value, performance change impact value), PRI=C×impact value of new antivirus software+D×impact value of performance change. The impact value of new antivirus software can be determined based on the security level of the new antivirus software and the degree of conflict with the software. The value range is 0 to 1. The performance change impact value can be determined based on the CPI difference before and after the computer performance change, and the value range is also 0 to 1; C and D are coefficients; Supply chain risk assessment module: evaluates risk factors in the software supply chain, including supplier credibility, software source reliability, and supply chain complexity, determines risk levels, and provides a basis for enterprises to formulate risk management strategies; Security policy management module: formulate and implement software supply chain security policies to ensure that the development, procurement and use of software meet security standards, monitor and audit the implementation of security policies, and promptly discover and correct violations; Incident response and management module: When a security incident occurs, it can respond quickly, conduct incident investigation and analysis, provide emergency response measures, reduce the impact of security incidents on the enterprise, and record and summarize security incidents in order to improve security management measures; User environment assessment module: When a user downloads software, with the user's consent, the module accesses the user's computer to detect whether different antivirus software is on or off, and evaluates the computer's performance. The module also feeds back this data to the enterprise terminal to determine whether the user has installed the software. After installation, the module continuously monitors the user's computer environment. If a new antivirus software appears and causes the installation to fail, the software information that failed to be installed will be sent to the enterprise environment operation terminal. The software provides clear instructions, informing users that the computer environment will be checked during the download process, including the anti-virus software status and computer performance assessment, and explaining the data usage and security measures, and seeking user consent. After the user agrees, the software will start downloading. The software installation package contains a detection module.

[0021] Software download detection phase: When the software is downloaded, the environment detection module runs to scan the user's computer. The detection module identifies the installed antivirus software and determines whether it is on or off by looking for the process name, service name, or specific file. At the same time, the computer performance is evaluated to obtain the CPU usage rate, memory occupancy rate, and hard disk read and write speed parameters, and these data are packaged and prepared for transmission to the enterprise terminal; Data transmission and analysis phase: The software sends the detection data to the enterprise server terminal. After receiving the data, the enterprise terminal determines whether the user's computer environment is suitable for installing the software based on the preset rules and algorithms in the vulnerability scanning and detection module and the software's compatibility requirements; User installation phase: The notification of whether the software can be installed or not and the reason are calculated by using the preset rules and algorithms in the vulnerability scanning and detection module; Post-download monitoring phase: After the software is downloaded, it is installed and the detection module is continuously run in the background to trigger the computer environment. If a new antivirus software is detected, its information is recorded. At the same time, the computer performance changes are continuously monitored; Problem feedback stage: New antivirus software causes unsuccessful installation or problems with software operation, and the software status and related data are packaged and transmitted to the enterprise environment operation terminal again.

[0022] The judgment method in the data transmission and analysis stage is: if the computer performance comprehensive index (CPI) ≥ the computer performance comprehensive index threshold and the installation feasibility index (IFI) ≥ the installation feasibility index threshold, it is judged to be suitable for software installation; If the post-installation risk index (PRI) is ≤ the acceptable threshold of post-installation risk, the post-installation risk is judged to be low; If PRI>PRI risk acceptance threshold, the risk after installation is judged to be high.

[0023] Supply Chain Comprehensive Risk Index (SCRI) in the Supply Chain Risk Assessment Module process = E × supplier reputation score + F × software source reliability score + G × supply chain complexity score; Among them, E, F, and G are weight coefficients, which can be adjusted according to the degree of importance the company attaches to different risk factors. The supplier credibility score can be determined based on the supplier's historical performance and industry evaluation factors; the software source reliability score can consider the source channel and certification status of the software; the supply chain complexity score can be determined based on the number of links in the supply chain and the geographical scope involved.

[0024] During the user installation phase, when informing the user of the reasons for whether or not to install the software, the formula to help the user understand the basis for the decision is: Installation Decision Explanation Index (IDI) = H × Antivirus Software Impact + I × Computer Performance Impact; Among them, H and I are coefficients. The impact of antivirus software can be determined based on the relationship between the antivirus software status value and software compatibility. The greater the conflict between antivirus software and software, the higher the impact of antivirus software. The impact of computer performance can be determined based on the gap between CPI and the minimum performance requirement of the software. The larger the gap, the higher the impact of computer performance. This index can be presented to users in the form of a percentage, allowing users to understand the impact of each factor on installation decisions.

[0025] The vulnerability scanning and detection module, supply chain risk assessment module, security policy management module, and incident response and management module of the software supply chain security detection integrated management platform work together with the user environment assessment module to jointly ensure the security of the software supply chain; The vulnerability scanning and detection module detects potential vulnerabilities of the software in the user environment. The supply chain risk assessment module considers the impact of user environment factors on supply chain risks. The security policy management module formulates security policies for different user environments. The incident response and management module quickly responds and handles problems when they occur in the user environment.

[0026] After receiving the user environment assessment data, the enterprise environment operation terminal of the software supply chain security testing comprehensive management platform stores, analyzes and compiles statistics on the data to provide a basis for software improvement and optimization. It adjusts the software configuration and optimization strategy according to the computer performance and antivirus software status of different users to improve the compatibility and stability of the software.

[0027] The security policy management module is integrated with security tools and systems to form a more complete security protection system. It is integrated with the enterprise's vulnerability management system, intrusion detection system, and firewall to achieve information sharing and collaborative protection. At the same time, the platform is connected with the software supplier's development management system to provide timely feedback on user environment issues and promote software improvement and optimization.

[0028] When users download the software, they must agree to access it to ensure the security and privacy of user data. When conducting user environment assessments, the software uses encrypted transmission and storage technology and strictly abides by relevant laws, regulations and privacy policies. The company has strict authority control over the use and management of user data to prevent data leakage and abuse. At the same time, the company regularly conducts security audits and risk assessments on user data to promptly identify and resolve security risks.

[0029] The software supply chain security testing integrated management platform also includes a user environment assessment system. The specific operation steps of the user environment assessment system are as follows: First, the software performs an environmental assessment when the user downloads it, obtaining the antivirus software status and performance data of the user's computer. Then, a formula is used to determine whether the user has installed the software. If so, the user will install the software. After installation, the platform will continuously monitor the user environment. If any problems occur, timely feedback will be sent to the enterprise terminal for processing. Finally, other modules of the platform perform comprehensive security testing and management on the software supply chain to ensure the security and reliability of the software. The modules cooperate with each other to form a complete software supply chain security protection system.

[0030] The software supply chain security testing comprehensive management platform consists of multiple modules, including vulnerability scanning and detection module, supply chain risk assessment module, security policy management module, incident response and management module and user environment assessment module. These modules work together to ensure the security of the software supply chain.

[0031] The vulnerability scanning and detection module is responsible for comprehensive vulnerability scanning of all links in the software supply chain, detecting code vulnerabilities, configuration errors, improper permission management security vulnerabilities, and providing detailed vulnerability reports. At the same time, the module evaluates the user's computer performance through the computer performance comprehensive index (CPI) formula, and uses the installation feasibility index (IFI) and post-installation risk index (PRI) formulas to determine whether the user's computer environment is suitable for installing the software and the risks that may occur after installation.

[0032] The supply chain risk assessment module evaluates risk factors in the software supply chain, such as the supplier's reputation, the reliability of the software source, and the complexity of the supply chain. By calculating the Supply Chain Comprehensive Risk Index (SCRI), it provides a basis for enterprises to formulate risk management strategies.

[0033] The security policy management module formulates and implements software supply chain security policies to ensure that the development, procurement and use of software meet security standards. It monitors and audits the implementation of security policies to promptly identify and correct violations. At the same time, this module integrates with other security tools and systems to form a more complete security protection system.

[0034] The incident response and management module responds quickly to security incidents, conducts incident investigation and analysis, provides emergency response measures, and reduces the impact of security incidents on the enterprise. Security incidents are recorded and summarized to improve security management measures. When users download software, the user environment assessment module accesses the user's computer with the user's consent, detects whether the antivirus software is on or off, and evaluates the computer's performance. This data is fed back to the enterprise terminal to determine whether the user is suitable for installing the software. After installation, the user's computer environment is continuously monitored. If the installation fails due to the emergence of new antivirus software, the relevant information is transmitted to the enterprise environment operation terminal.

[0035] Working Principle of Vulnerability Scanning and Detection Module Computer Performance Detection The calculation of the Computer Performance Index (CPI) takes into account multiple performance indicators such as CPU, memory, and hard disk. By setting weight coefficients (α, β, γ) for different performance indicators, you can adjust the software according to its dependence on different performance indicators. The CPU performance score is determined by considering CPU usage and clock frequency. Lower CPU usage and higher clock frequency generally mean better performance, resulting in a higher CPU performance score. The memory performance score is determined by memory occupancy and memory read and write speed. Lower memory occupancy and faster memory read and write speed help improve the memory performance score. The hard disk performance score is determined by hard disk space and read and write speed. Sufficient hard disk space and faster read and write speed can obtain a higher hard disk performance score. Determine whether the user has installed antivirus software The Installation Feasibility Index (IFI) formula combines the antivirus software status and CPI. The antivirus software status value is 0 (off) or 1 (on), and A and B are coefficients, which are determined according to the importance the enterprise attaches to the antivirus software status and computer performance. By judging whether the IFI is higher than the installation feasibility index threshold, it can be determined whether the user's computer environment is suitable for installing the software. Evaluating post-installation risk The post-installation risk index (PRI) takes into account the impact value of new antivirus software and the impact value of performance changes. The impact value of new antivirus software is determined based on the security level of the new antivirus software and the degree of conflict with the software, and the value range is 0 to 1. The impact value of performance changes is determined based on the CPI difference before and after the computer performance changes, and the value range is also 0 to 1. C and D are coefficients, which are determined according to the company's emphasis on new antivirus software and performance changes. By judging whether the PRI is higher than the acceptable threshold of post-installation risk, the level of post-installation risk can be determined.

[0036] How the supply chain risk assessment module works: The supply chain risk assessment module determines the risk level by evaluating the supplier's reputation, software source reliability, and supply chain complexity. The supplier reputation score determines the supplier reputation score based on the supplier's historical performance and industry evaluation factors. Suppliers with good reputations usually have higher scores, which means that the software they provide is more likely to be safe and reliable. The software source reliability score considers the source channel and certification status of the software to determine the software source reliability score. Software from formal channels and certified usually has a higher score, reducing security risks. The supply chain complexity score determines the supply chain complexity score based on the number of links in the supply chain and the geographical scope involved. The more complex the supply chain, the more potential risk points there are, and the score is correspondingly lower. By calculating the supply chain comprehensive risk index (SCRI) = E × supplier reputation score + F × software source reliability score + G × supply chain complexity score, where E, F, and G are weight coefficients, which can be adjusted according to the importance of the enterprise to different risk factors. Enterprises can formulate corresponding risk management strategies based on the results of SCRI.

[0037] Working principle of the security policy management module: Formulate and implement security policies The security policy management module formulates software supply chain security policies to ensure that the development, procurement and use of software meet security standards. This includes the review of security specifications in the software development process, the review of procurement channels, and the security management aspects during use. Monitor and audit the implementation of security policies Monitor and audit the implementation of security policies, and promptly detect and correct violations. Ensure the effective implementation of security policies through regular inspections and evaluations. Integration with other security tools and systems Integrate with the enterprise's vulnerability management system, intrusion detection system, and firewall to achieve information sharing and collaborative protection. Different security tools and systems can complement each other and improve the overall level of security protection. Connect with the software supplier's development management system to promptly feedback user environment issues and promote software improvement and optimization. Software suppliers can adjust the design and development of software based on user environment assessment data to improve the compatibility and stability of software.

[0038] Working principle of the incident response and management module: Quick response to security incidents When a security incident occurs, the incident response and management module can respond quickly. Immediately initiate the incident investigation and analysis program to determine the nature, scope and impact of the incident. Provide emergency response measures According to the situation of the incident, provide corresponding emergency response measures, such as isolating the affected system, repairing vulnerabilities, and restoring data. Reduce the impact of security incidents on the enterprise. Record and summarize security incidents Record and summarize security incidents, analyze the causes and lessons of the incidents. In order to improve security management measures and enhance the ability to respond to similar incidents.

[0039] Working principle of user environment assessment module: Environment assessment during downloading When the user downloads the software, the user's computer is accessed after the user agrees. By looking for the process name, service name or specific file, the on or off status of the installed antivirus software is detected. At the same time, the computer performance is evaluated to obtain the CPU usage rate, memory occupancy rate, and hard disk read and write speed parameters. These data are packaged and prepared for transmission to the enterprise terminal. The data transmission and analysis software sends the detection data to the enterprise server terminal. The enterprise terminal determines whether the user's computer environment is suitable for installing the software based on the preset rules and algorithms in the vulnerability scanning and detection module and the compatibility requirements of the software. If it is judged to be suitable for installation during the user installation stage, a notification that it can be installed is sent to the user; if it is not suitable for installation, a notification that it cannot be installed is sent, and the installation decision explanation index (IDI) formula is used to help users better understand the basis for the decision. IDI = H × Antivirus software impact + I × Computer performance impact, where H and I are coefficients. The antivirus software impact is determined based on the relationship between the antivirus software status value and the software compatibility, and the computer performance impact is determined based on the gap between the CPI and the minimum performance requirements of the software. After the download is complete, the monitoring software is installed and the detection module is continuously running in the background. The computer environment is checked in a triggering manner. If a new anti-virus software is detected, its information is recorded. At the same time, the computer performance changes are continuously monitored. Problem feedback If the new anti-virus software causes the installation to fail or the software operation has problems, the software status and related data are packaged and transmitted to the enterprise environment operation terminal again.

[0040] Environmental assessment and installation decision First, the software performs an environmental assessment when the user downloads it, and obtains the antivirus software status and performance data of the user's computer. The formula is used to calculate whether the user is suitable for installing the software. If suitable, the user installs the software; if not suitable, the user can consider whether to take measures to improve the computer environment to meet the installation requirements based on the reasons and suggestions in the notification.

[0041] Post-installation monitoring and problem handling After installation, the platform continuously monitors the user environment. If a problem occurs, it will be promptly fed back to the enterprise terminal for processing. Enterprises can adopt corresponding solutions based on the nature of the problem, such as providing technical support, optimizing software configuration, and fixing vulnerabilities. At the same time, other modules of the platform conduct comprehensive security testing and management of the software supply chain to ensure the security and reliability of the software. The various modules cooperate with each other to form a complete software supply chain security protection system.

[0042] User consent and data usage description When the software conducts user environment assessment, it provides clear instructions to inform users that the computer environment will be tested during the download process, including antivirus software status and computer performance assessment, and explain the data usage and security measures. Data collection and processing will only begin after obtaining user consent. Encrypted transmission and storage technology Encrypted transmission and storage technology is used to ensure the security of user data during transmission and storage. Prevent data from being stolen or tampered with. Strict permission control The company has strict permission control over the use and management of user data. Only authorized personnel can access and process user data. Prevent data leakage and abuse. Security audit and risk assessment The company regularly conducts security audits and risk assessments on user data to promptly discover and resolve security risks. Ensure that the security and privacy of user data are effectively protected.

[0043] It should be noted that, in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0044] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and alterations may be made to the embodiments without departing from the principles and spirit of the invention, the scope of the invention being defined by the appended claims and their equivalents.

Claims

1. A software supply chain security detection integrated management platform, characterized by: Includes vulnerability scanning and detection module: used to conduct comprehensive vulnerability scanning of each link in the software supply chain, detect potential security vulnerabilities, code vulnerabilities, configuration errors, improper permission management, and provide detailed vulnerability reports; The computer performance detection formula in the vulnerability scanning and detection module is: Computer performance comprehensive index CPI = α × CPU performance score + β × memory performance score + γ × hard disk performance score +; Among them, α, β, and γ are weight coefficients, which can be adjusted according to the degree of software dependence on different performance indicators. The CPU performance score can be determined by comprehensively considering the CPU usage rate and clock frequency factors; the memory performance score can be determined according to the memory occupancy rate and memory read and write speed; the hard disk performance score can be determined according to the hard disk space and read and write speed; The formula for determining whether the user has installed antivirus software in the vulnerability scanning and detection module is: Installation Feasibility Index (IFI) formula: IFI=f(antivirus software status, CPI); IFI=A×antivirus software status value+B×CPI, where the antivirus software status value is 0 (off) or 1 (on), and A and B are coefficients; Post-installation risk index (PRI) formula: PRI = g (new antivirus software impact value, performance change impact value), PRI=C×impact value of new antivirus software+D×impact value of performance change. The impact value of new antivirus software can be determined based on the security level of the new antivirus software and the degree of conflict with the software. The value range is 0 to 1. The performance change impact value can be determined based on the CPI difference before and after the computer performance change, and the value range is also 0 to 1; C and D are coefficients; Supply chain risk assessment module: evaluates risk factors in the software supply chain, including supplier credibility, software source reliability, and supply chain complexity, determines risk levels, and provides a basis for enterprises to formulate risk management strategies; Security policy management module: formulate and implement software supply chain security policies to ensure that the development, procurement and use of software meet security standards, monitor and audit the implementation of security policies, and promptly discover and correct violations; Incident response and management module: When a security incident occurs, it can respond quickly, conduct incident investigation and analysis, provide emergency response measures, reduce the impact of security incidents on the enterprise, and record and summarize security incidents in order to improve security management measures; User environment assessment module: When a user downloads software, with the user's consent, the module accesses the user's computer to detect whether different antivirus software is on or off, and evaluates the computer's performance. The module also feeds back this data to the enterprise terminal to determine whether the user has installed the software. After installation, the module continuously monitors the user's computer environment. If a new antivirus software appears and causes the installation to fail, the software information that failed to be installed will be sent to the enterprise environment operation terminal. The software provides clear instructions, informing users that the computer environment will be checked during the download process, including the anti-virus software status and computer performance assessment, and explaining the data usage and security measures, and seeking user consent. After the user agrees, the software will start downloading. The software installation package contains a detection module.

2. A software supply chain security detection integrated management platform according to claim 1, characterized in that: Software download detection phase: When the software is downloaded, the environment detection module runs to scan the user's computer. The detection module identifies the installed antivirus software and determines whether it is on or off by looking for the process name, service name, or specific file. At the same time, the computer performance is evaluated to obtain the CPU usage rate, memory occupancy rate, and hard disk read and write speed parameters, and these data are packaged and prepared for transmission to the enterprise terminal; Data transmission and analysis phase: The software sends the detection data to the enterprise server terminal. After receiving the data, the enterprise terminal determines whether the user's computer environment is suitable for installing the software based on the preset rules and algorithms in the vulnerability scanning and detection module and the software's compatibility requirements; User installation phase: The notification of whether the software can be installed or not and the reason are calculated by using the preset rules and algorithms in the vulnerability scanning and detection module; Post-download monitoring phase: After the software is downloaded, it is installed and the detection module is continuously run in the background to trigger the computer environment. If a new antivirus software is detected, its information is recorded. At the same time, the computer performance changes are continuously monitored; Problem feedback stage: New antivirus software causes unsuccessful installation or problems with software operation, and the software status and related data are packaged and transmitted to the enterprise environment operation terminal again.

3. A software supply chain security detection integrated management platform according to claim 2, characterized in that: The judgment method in the data transmission and analysis stage is: if the computer performance comprehensive index (CPI) ≥ the computer performance comprehensive index threshold and the installation feasibility index (IFI) ≥ the installation feasibility index threshold, it is judged to be suitable for software installation; If the post-installation risk index (PRI) is ≤ the acceptable threshold of post-installation risk, the post-installation risk is judged to be low; If PRI>PRI risk acceptance threshold, the risk after installation is judged to be high.

4. A software supply chain security detection integrated management platform according to claim 1, characterized in that: The Supply Chain Comprehensive Risk Index (SCRI) in the supply chain risk assessment module process = E × supplier reputation score + F × software source reliability score + G × supply chain complexity score; Among them, E, F, and G are weight coefficients, which can be adjusted according to the degree of importance the company attaches to different risk factors. The supplier credibility score can be determined based on the supplier's historical performance and industry evaluation factors; the software source reliability score can consider the source channel and certification status of the software; the supply chain complexity score can be determined based on the number of links in the supply chain and the geographical scope involved.

5. A software supply chain security detection integrated management platform according to claim 2, characterized in that: The formula for helping users understand the decision basis when notifying them of the reasons for installation or non-installation during the user installation phase is: Installation Decision Explanation Index (IDI) = H × Antivirus Software Impact + I × Computer Performance Impact; Among them, H and I are coefficients. The impact of antivirus software can be determined based on the relationship between the antivirus software status value and software compatibility. The greater the conflict between antivirus software and software, the higher the impact of antivirus software. The impact of computer performance can be determined based on the gap between CPI and the minimum performance requirement of the software. The larger the gap, the higher the impact of computer performance. This index can be presented to users in the form of a percentage, allowing users to understand the impact of each factor on installation decisions.

6. A software supply chain security detection integrated management platform according to claim 1, characterized in that: The vulnerability scanning and detection module, supply chain risk assessment module, security policy management module and incident response and management module of the software supply chain security detection integrated management platform cooperate with the user environment assessment module to jointly ensure the security of the software supply chain; The vulnerability scanning and detection module detects potential vulnerabilities of the software in the user environment. The supply chain risk assessment module considers the impact of user environment factors on supply chain risks. The security policy management module formulates security policies for different user environments. The incident response and management module quickly responds and handles problems when they occur in the user environment.

7. A software supply chain security detection integrated management platform according to claim 1, characterized in that: After receiving the user environment assessment data, the enterprise environment operation terminal of the software supply chain security detection integrated management platform stores, analyzes and compiles statistics on the data to provide a basis for software improvement and optimization. It adjusts the software configuration and optimization strategy according to the computer performance and antivirus software status of different users to improve the compatibility and stability of the software.

8. A software supply chain security detection integrated management platform according to claim 1, characterized in that: The security policy management module is integrated with security tools and systems to form a more complete security protection system, and is integrated with the enterprise's vulnerability management system, intrusion detection system, and firewall to achieve information sharing and collaborative protection. At the same time, the platform is connected with the software supplier's development management system to provide timely feedback on user environment issues and promote software improvement and optimization.

9. A software supply chain security detection integrated management platform according to claim 1, characterized in that: The user downloads the software and accesses it with the user's consent to ensure the security and privacy of the user's data. When conducting user environment assessments, the software uses encrypted transmission and storage technology and strictly abides by relevant laws, regulations and privacy policies. The company has strict authority control over the use and management of user data to prevent data leakage and abuse. At the same time, the company regularly conducts security audits and risk assessments on user data to promptly identify and resolve security risks.

10. The software supply chain security detection integrated management platform according to claim 1, characterized in that: It also includes a user environment assessment module: it is used to perform an environmental assessment when the user downloads the software, obtain the anti-virus software status and performance data of the user's computer, and determine whether the user has installed the software through formula calculations. If installed, the user installs the software. After installation, the platform continuously monitors the user environment. If any problems arise, they are promptly fed back to the enterprise terminal for processing. Other modules of the platform perform comprehensive security testing and management of the software supply chain to ensure the security and reliability of the software. The modules cooperate with each other to form a complete software supply chain security protection system.

Images