软件可信性静态度量模型设计与工具实现

发布时间：2018-02-27 21:11

本文关键词： 软件可信性失信证据可信属性 Cppcheck　出处：《华东师范大学》2017年硕士论文　论文类型：学位论文

【摘要】：由于软件事故频发,软件可信性成为目前学术界在软件质量保证方面重点关注的话题,其中可信性度量是首要研究课题。相比于通过对软件开发过程的评估来度量软件可信性,对软件实体进行可信性度量更加贴合用户实际需求。本文基于软件源代码的可信性度量反映软件可信性,并提出一种自底向上的软件可信度量体系,使得度量结果更加准确高效。首先,本文提出了软件失信及失信证据的定义,围绕定义对失信证据进行可信性分析,并提出失信证据可信等级模型和失信证据属性模型,将这两个模型应用于CWE缺陷库进行失信证据数统计。其次,本文提出一种新的度量方法。对软件可信性进行自底向上分层度量,度量路径为"属性-软件"。针对属性可信度量提出一种综合的属性度量模型,并对该模型进行了相关性质验证。在软件可信度量模型中通过基于属性相互影响的方法确定各属性权重。采用蒙特卡洛仿真验证了该模型的有效性和稳定性。最后,将上述提出的度量方法在工具上进行实现。该工具在开源静态检测工具Cppcheck的基础上进行二次开发,增加自定义失信证据检查规则,形成了集检测与评估于一体的软件可信性静态度量工具TSMT。本文提出的方法和工具形成了完整的软件可信度量体系。该体系能够应用于软件交付使用前的可信性度量,为用户把握软件可信性提供了帮助。
[Abstract]:Due to the frequent occurrence of software accidents, software credibility has become the focus of attention in the field of software quality assurance, in which credibility measurement is the primary research topic, compared with the evaluation of software development process to measure software credibility. The credibility measurement of software entities is more suitable to the actual needs of users. This paper presents a bottom-up software credibility measurement system based on the reliability metrics of software source code to reflect the software credibility. First of all, this paper puts forward the definition of software discredit and evidence of discredit, analyses the credibility of evidence of breach of trust around the definition, and puts forward the credibility level model and attribute model of evidence of breach of trust. The two models are applied to the CWE defect library to count the evidence of discredit. Secondly, a new measurement method is proposed, which measures the software credibility from bottom to top. The measurement path is "attribute-software". A comprehensive attribute measurement model is proposed for attribute credibility. In the software reliability model, the weights of each attribute are determined by the method based on the interaction of attributes. The validity and stability of the model are verified by Monte Carlo simulation. This tool is developed on the basis of open source static detection tool Cppcheck, and the self-defined rule of checking evidence of discredit is added. A static software credibility measurement tool TSMT. the methods and tools presented in this paper form a complete software credibility measurement system, which can be applied to the reliability measurement before the software is put into use. For the user to grasp the credibility of the software to provide help.
【学位授予单位】：华东师范大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP311.52

【参考文献】