{"ok":true,"entity":{"slug":"software-supply-chain-security","entityType":"concept","name":"Software Supply Chain Security","officialName":"Software Supply Chain Security","canonicalName":"Software Supply Chain Security","displayName":"ソフトウェアサプライチェーンセキュリティ","category":"セキュリティ概念（ソフトウェア開発・配布過程の保護）","shortDescription":"ソフトウェアの開発・ビルド・配布過程に混入する脆弱性・悪意あるコードからシステムを保護する概念。米CISA・NISTがSecure Software Development Framework（SSDF、NIST SP 800-218）やSoftware Bill of Materials（SBOM）を通じて標準化を推進している。","alias":["ソフトウェアサプライチェーンセキュリティ","SSDF","SBOM"],"searchKeywords":["Software Supply Chain Security","SSDF","SBOM","NIST SP 800-218","ソフトウェアサプライチェーン"],"website":null,"parentEntity":null,"primaryCluster":"network-security","secondaryClusters":[],"entityTier":"normal","verificationStatus":"draft","id":"software-supply-chain-security","updatedAt":"2026-07-28T03:03:26.398Z"},"referenceIndex":["P-01-001","P-04-001","P-06-001","P-02-001"]}