构件化软件系统安全性分析技术研究

Study on Component-based Software Safety Analysis

复杂系统的软件安全性分析中存在众多的含糊表述和不确定性问题,主观评价和模糊集理论即为处理此类问题的有效方法。首先对复杂软件涉及到的安全性要素进行模糊数学化表述,按照构件化的思想,对单个构件/模块的安全度进行分析,进而利用Dempster-Shafer证据理论对整个软件系统进行安全度综合,实现对软件系统的安全性分析和评估,最终按照DO-178B标准给出软件的安全等级,并通过实例加以说明。

Many obscure expressions and uncertainties exit during the process of safety analysis for complicated safetycritical software,while the theory of fuzzy sets and subjective evaluation is an effective methodology to deal with these problems. We presented the fuzzy expressions of the software safety factors, then analyzed the safety score of single component. After that, we synthesised the safety score of subsystem and system quantitatively by using the fuzzy operalions and evidential reasoning approach. Finally, an example was presented to demonstrate the proposed software analysis and synthesis method.