软件可信评估研究综述:标准、模型与工具

发布时间：2018-04-27 02:29

本文选题：软件可信性 + 可信评估　；参考：《软件学报》2016年04期

【摘要】：安全攸关软件的可信性关乎生命安全和财产保全,因此,分析评价软件可信性是否符合用户的预期(即软件可信评估)至关重要.软件可信评估从主观和客观两个方面度量软件的质量,对软件生产和应用有着重要的意义.综述了可信评估管理中涉及到的标准、模型和工具,而非关注软件度量本身.首先分析对比了软件可信性、可信评估的定义,并在研究了与可信性密切相关的软件质量的联系与区别之后,从相关国际标准、评估涉及的模型(包括质量属性模型、证据模型、分级规范等)以及软件工具支持等方面综述了软件可信评估研究工作.并且区分了这些方面中领域相关、领域无关的不同之处.目前软件可信评估已取得了一定的理论成果,并开发了若干工具辅助进行可信评估,但仍需在通用性、可伸缩性等方面有所加强.
[Abstract]:The credibility of the software is vital to the safety of life and the preservation of property. Therefore, it is very important to analyze and evaluate whether the credibility of the software conforms to the expectation of the user (that is, the software trust evaluation). Software trusted evaluation measures software quality from subjective and objective aspects, which is of great significance to software production and application. This paper reviews the standards, models and tools involved in trusted evaluation management, rather than focusing on software metrics themselves. Firstly, the definition of software credibility and trusted evaluation is analyzed and compared. After studying the relationship and difference of software quality, which is closely related to credibility, the models involved (including quality attribute model) are evaluated from relevant international standards. Evidence model, hierarchical specification and software tool support are reviewed in this paper. It also distinguishes the difference between domain and domain in these aspects. At present, some theoretical achievements have been achieved in software trusted assessment, and several tools have been developed to assist in trusted evaluation, but it still needs to be strengthened in the aspects of generality, scalability and so on.
【作者单位】：南京航空航天大学计算机科学与技术学院;北京大学计算机科学技术系;
【基金】：国家自然科学基金(61272083) 国家高技术研究发展计划(863)(2015AA015303) 中央高校基础科研业务费专项资金(NS2015093)~~
【分类号】：TP311.53

【相似文献】