安全性苛求系统中关于软件安全性评价的研究

Research on the Software Safety Assessment of Safety Critical Systems

安全性苛求系统由于其行为直接关系人身和大宗财产的安全 ,需要有一个安全性定量指标来反映系统中计算机软件的安全性品质。由于安全性苛求系统的软件在开发时规定要采取一系列可靠性和安全性措施 ,到形成产品后 ,软件内部缺陷的暴露都是一些小概率事件 ,如果仅仅依靠测试数据进行安全性定量评估 ,由于测试开销的限制 ,依据似感不足。本文提出一种多元、多模型、多阶段进行安全性评价的方法。在系统开发和运用的不同阶段 ,从不同角度 ,利用历史的和当前的数据 ,依靠客观和主观的判断 ,对系统的安全性进行评价 。

Because the behaviors of safety critical systems are often directly related to the safety of the people's life and wealth, a kind of quantitative safety index is needed to reflect the safety quality of software embedded in computer systems During the development of such software, a series of reliability and safety measures are recommended to be adopted Thus, with the software having turned into a product, all the emergences of the internal defects in software are rare events Due to the limit of the testing expenditure, it seems to be a lack of gist to carry through quantitative safety assessment only based on testing data A kind of multi source, multi model and multi stage method to implement safety assessment is introduced in this paper It is expected that by using historic and current data from different angle and in different stages of system development and application, the safety assessment of systems based on objective and subjective judgment should be able to reflect the safety of systems relatively integrally