試験CISSP-JP トピック1 問題1448 スレッド

Code signing is the process of applying a digital signature to a piece of code to verify its authenticity and integrity. Code signing helps protect the code from unauthorized modification, tampering, or corruption. Code signing also helps users and systems to identify the source and trustworthiness of the code. In software development, the entity that normally signs the code is the developer who created or modified the code. The developer uses a private key to sign the code and a public key certificate to associate the signature with the developer's identity. The developer's signature can then be verified by anyone who has the corresponding public key or a trusted certificate authority (CA). References: Official (ISC)2 CISSP CBK Reference, Chapter
8: Software Development Security, Section: Code Signing, pp. 1067-1068.