| 引用本文: | 沈国华,黄志球,谢冰,朱羿全,廖莉莉,王飞,刘银陵.软件可信评估研究综述:标准、模型与工具.软件学报,2016,27(4):955-968 |
| |
|
| 摘要: |
| 安全攸关软件的可信性关乎生命安全和财产保全,因此,分析评价软件可信性是否符合用户的预期(即软件可信评估)至关重要.软件可信评估从主观和客观两个方面度量软件的质量,对软件生产和应用有着重要的意义.综述了可信评估管理中涉及到的标准、模型和工具,而非关注软件度量本身.首先分析对比了软件可信性、可信评估的定义,并在研究了与可信性密切相关的软件质量的联系与区别之后,从相关国际标准、评估涉及的模型(包括质量属性模型、证据模型、分级规范等)以及软件工具支持等方面综述了软件可信评估研究工作.并且区分了这些方面中领域相关、领域无关的不同之处.目前软件可信评估已取得了一定的理论成果,并开发了若干工具辅助进行可信评估,但仍需在通用性、可伸缩性等方面有所加强. |
| 关键词: 软件可信性 可信评估 软件质量 软件度量 安全攸关软件 |
| DOI：10.13328/j.cnki.jos.005024 |
| 分类号: |
| 基金项目:国家自然科学基金(61272083);国家高技术研究发展计划(863)(2015AA015303);中央高校基础科研业务费专项资金(NS2015093) |
|
| Survey on Software Trustworthiness Evaluation:Standards, Models and Tools |
|
SHEN Guo-Hua1, HUANG Zhi-Qiu1, XIE Bing2, ZHU Yi-Quan1, LIAO Li-Li1, WANG Fei1, LIU Yin-Ling1
|
|
1.College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 211106, China;2.Department of Computer Science and Technology, Peking University, Beijing 100871, China
|
| Abstract: |
| The failure of safety-critical software could result in death, injury and damage to people or loss of equipment or property. Therefore, it is important to evaluate whether software trustworthiness fulfills the user needs(i.e., trustworthiness evaluation). This paper first compares the definition of software trustworthiness and its evaluation. Then, it surveys the software trustworthiness evaluation from three different aspects:Standards, models, and CASE tools. This work studies these aspects from the view of domain-independent as well as domain-dependent. In summary, there is great progress being made for software trustworthiness evaluation theoretically and practically while its universality and scalability are still need to be improved. |
| Key words: software trustworthiness trustworthiness evaluation software quality software metrics safety-critical software |
