云原生安全白皮书地2版中文版-2023.11-57页-WN11.pdf

Version:2.0Created:12Jan2022Status:WIP|InReview|

Approved

LastReviewed:16May2022,PDFPublished:17May2022

ReleaseVersion:2.0

FinalPDFApprovers[X]@TheFoxAtWork[X]@justincormack

Version2(May2022)

•Contributors:BrandonKrieger,ColeKennedy(TestifySec),

FatihDeğirmenci(EricssonSoftwareTechnology),Frederick

Kautz,JoelBork,MarinaMoore(NYU),

mateuszpruchniak@,PushkarJoglekar(VMware),

raja.faisal@,SavithaRaghunathan(RedHat),

SayantaniSaha(Independent)

•Reviewers:JonZeolla,@nyrahul(Accuknox),Ragashree

Shekar,StevenHadfield,KapilBareja,MaliniBhandaru,

MikkoYlinen,JonahKowall(@jkowall),KuangDahu,Ariel

Shuper,EricLi(AlibabaCloud),TannerRandolph(Applied

Systems),MarkDaltonGray(Microsoft),CiaraCarey,

BrandonLum(TAGSecurityChair),EmilyFox(TOCLiaison)

andJustinCormack(TOCliaison).

Version2inChinese(September2023)

•Translatorandreviewers:@aiaicaow,@babysor,@cafra,

@dwctua,@gtb-togerther,@hbrls,@jinjia,@knwng,

@losery,@lovepoem,@n3erox0,@rootsongjc,@victorjunlu,

@yzyunzhang(GitHubIDs)

2

目录

执行摘要4

ßè4

生命周期º段4

è荐做法6

结论6

Ï绍7

目oØ_7

ß原生目o7

文档前提8

ß原生层次模型9

生命周期10

开发10

V发12

部署17

ß行时ÿ境18

Ü全保障31

威胁建模31

用例ÿ勒索ðþÿv2新增Ā35

Ü全原则38

Ü全pÿv2新增Ā44

合规44

÷管ü计44

角色和用例44

行业45

用例ÿ在欧盟法规QÜ全的保障金融机构ß行v2新增46

ß原生Ü全的演Ù48

结论50

缩略语和词汇表51

Ö录53

x本N总结v2新增53

新x本Ù化53

à馈v2新增53

Ü全ðþ开发框架ÿSSDFĀv1.1参考ÿv2新增Ā54

参考文献55

ô谢57