支持软件可信评估的框架及其应用研究

软件可信评估是软件可信研究的一个重要方面,但是目前已有的研究存在适用的软件形态受限、评估的可信属性不全面、未提供具体的应用实现等不足。针对上述问题,通过对已有相关工作进行改进和扩展,提出了一种通用的软件可信评估框架,阐述了应用该框架实现可信评估的具体过程,给出了详尽的案例分析,并基于该框架开发了可信评估管理系统,验证了框架实施的可行性。实验表明此项研究适用于不同形态的软件,支持可信属性、可信证据、评估指标的定制,对于软件可信评估活动的成功实施具有一定的指导作用。

Framework Supporting Software Evaluation on Trustworthiness and its Application

Software trustworthiness evaluation is an important aspect of software trustworthiness research. There are some deficiencies in the current research, such as facing special software modality, limited trustworthiness attribute, without implication of concept model. Based on improvement and expansion of existing related work, this paper presents a general framework supporting software evaluation on trustworthiness, discusses systematically its imple-mentation procedure, then gives a detailed case study, finally develops a trustworthiness evaluation management system based on this framework, which verifies the practicability of this work. This approach applies to different software modality, supports customization of trustworthiness attribute, trustworthiness evidence and evaluating in-dicator, it will be beneficial to successful trustworthiness evaluation practices.