基于系统理论过程分析的软件安全性分析

Analysis of software safety based on system theoretic process analysis

通过分析、总结已有的危险分析技术,将系统理论过程分析(STPA)方法与其他方法相比较,总结、形成了软件安全性技术框架。其次,对比已有的分析方法,明确了一种适合软件密集系统的危险分析方法。最后使用STPA方法对飞机除冰系统进行了分析研究,证明了方法的可行性。

Most software safety methods are targeted at the accident of component failure. However, studies have shown an increasing number of accidents are caused by the non-functional interactions between components rather than components failures. To solve this problem, a new method called STPA （System Theory Process Analysis） was proposed by Nancy G. Leveson fellow and gradually drew attention. This article analyzed and summarized the existing technology, comparing the STPA with them, to create the software safety technology framework. Secondly, by analyzing these methods and comparing them, a hazard analysis method for software-intensive systems was dearly determined. Finally, this article used an example of analyzing the deicing system to verify the feasibility of the method.