关键词: 安全左移；软件安全；安全开发；管控平台

Abstract: Under the trend of "software defined vehicles" with intelligentizing and networking, the importance of vehicles software continues to rise, and the security of vehicles software is becoming more important. In order to deal with the continuous network security attacks against vehicles, vehicle enterprises need to identify software defects and weaknesses early in the software development process, and intervene the security measures at all stages of software development. Therefore, the "shift left" software security development management and control platform is proposed. This platform can help vehicles enterprises implement software security development, accumulate software security development technology, reserve software security development talents, help enterprises continuously improve software security development process, enhance software product security capabilities, improve the overall security level of vehicles enterprises. Through the implementation in vehicles enterprises, the security vulnerability of vehicles software products has been effectively reduced, the development cost has been reduced, the overall management is visible, the business security is endogenous, forming the security development process standard of vehicles enterprises. This platform provides a new idea for the management and control of software security development in the vehicles industry.

Key words: Shift left; Software security; Security development; Management and control platform