基于系统思维的软件安全性需求开发方法研究

Research on software security requirement development method based on system thinking

发生毁灭性事故的最关键的因素就是软件的安全性不够到位,究其根本就是软件的需求部分没有合理的规划、设计。那么,如何解决软件需求的这个问题,就是人们急需解决的事情,就需要从软件的安全性能出发,利用系统思维的进行系统分析和建模相统一的一种组织架构。在一些特定的运用领域,可以利用集成安全性分析的需求开发方法,这种方法能够最大程度地解决安全性能的问题,抑制安全方面问题的传播,并且能够尽快的解决其安全性能问题,进而支持安全性论据的构建。

The most critical factor in the occurrence of devastating accidents is that the security of the software is not in place, and the basic requirement of the software is that there is no reasonable planning and design. So, how to solve the software requirements of this problem is that people need to solve the problem, you need from the software security performance, the use of systematic thinking system analysis and modeling of a unified organizational structure. In some specific application areas, you can take advantage of the integrated development of security requirements analysis method, this approach can be the greatest degree of security to solve the problem, inhibit the spread of security issues, and to solve their security problems as soon as possible, and thus support Construction of Security Argument.