Aerospace Zhixin, as an important layout of the Third Academy of China Aerospace Science and Industry in the field of information equipment, is mainly engaged in system application and joint system research, top-level design, overall demonstration and development and production of complex information systems, providing system-level, system The overall solution of the level information system, as well as the design, development and integration verification of the information security system.
Develop complex aerospace systems
Code security and quality meet challenges
As a pioneer in the construction of my country's network information system, Aerospace Zhixin has undertaken research and development of more than 100 systems for the aerospace field. In the process of research and development of information systems in the aerospace field, Aerospace Zhixin faced many professional system problems of high complexity, among which the extremely high requirements for system security and stability made every link of the aerospace system from research and design to integrated delivery must be strictly controlled, but encountered difficult problems in the development and coding phase of the system:
-
There is a lack of methods and measures to identify and fix code loopholes and quality problems during the coding phase.
-
The code review process is inefficient and labor intensive and time consuming.
-
The continuity and reliability of the system are affected by code quality problems.
CodeSec strictly controls code security and quality
Aerospace systems achieve high-quality development
Aerospace Zhixin uses the open source network security code review platform CodeSec as a code detection tool to strengthen the construction of R&D security capabilities and ensure the safety and quality of aerospace professional systems in the R&D stage.
Vulnerabilities are fully covered, and problems are found early. Compared with the traditional pre-release environment or security scanning in the production environment, Aerospace Zhixin applies an open source network security code review platform, which can conduct in-depth static analysis on the code of the IDE or code library during the code writing or compiling stage, and comprehensively identify code security Vulnerabilities, and inform developers to fix them as soon as possible.
Code detection saves time and effort. Through the open source network security code review platform, Aerospace Zhixin quickly and accurately completes automated code detection, reduces the repeated manual review work of security personnel, and saves a lot of time for research and development to identify and repair code problems.
Code quality control to improve system stability. The open source network security code review platform provides Aerospace Zhixin with continuous and comprehensive code detection capabilities, uses predetermined rule sets to analyze code structure and syntax, determines the quality problems existing in the code, and performs timely feedback and repairs to reduce system instability during operation. Reduce security risks.
Through CodeSec, Aerospace Zhixin has completed in-depth code detection and analysis in the early stage of the software life cycle, effectively identifying and repairing potential code loopholes and quality problems, improving the delivery quality and efficiency of Aerospace Zhixin, and ensuring the safety and security of my country's complex aerospace systems. quality.
Kaiyuan Network Security has always taken "defending China's software security" as its mission, helping the high-quality development of digital systems in my country's aerospace field, and providing solid technical support for R&D and innovation in various industries in China, and promoting my country to become a "digital power".