大型复杂软件系统安全需求的体系结构模型

Security Requirements Architecture Model for Large and Complex Software Systems

在开发基于Internet的大型复杂软件系统时,应该在体系结构层次上考虑业务需求和安全需求,而传统的体系结构没有专门针对安全需求的构件、连接件和体系结构风格的描述,因此在体系结构层次上描述安全需求还比较困难。本文首先论述了在体系结构层次上描述安全需求的必要性。然后,在传统体系结构单元——部件/连接件的基础上,引入了安全构件、半安全构件、安全连接件、半安全连接件等新的设计单元,并给出了这些设计单元形式化的语义和约束以及图形模型,解决了软件系统安全需求的构件表示方式。最后,用一个实例展示了软件系统安全需求的体系结构模型。

It is imperative to considerate the functional requirements and security requirements on architecture level when developing the large and complex software system in Internet. Because traditional architecture has no direct component, connector and style for security requirements, it is difficult to descript these security requirements on architecture level. In this paper, necessities for security requirements architecture model are discussed, and then, some new fundamental units based on the traditional software architecture, such as security component, security connector, half- security component and half-security connector, and so on, are presented, moreover, the formal semantic elements, constraints and graph for these new units are established, so the representation of security requirements by componentfashion is resolved. Finally, with an example to show the security requirements architecture model for large distributed software systems in Intemet.