中国科学院软件研究所机构知识库
Advanced  
ISCAS OpenIR  > 软件所图书馆  > 期刊论文
Title:
基于通用知识的软件设计安全性评估
Alternative Title: Knowledge-Based Secur ity Evaluation in Software Design
Author: 戚荣波 ; 杜晶 ; 杨叶
Keyword: 软件安全性 ; 通用知识 ; 攻击模式 ; 软件安全性评估 ; UML顺序图 ; software security ; common knowledge ; attack pattern ; software security evaluation ; UML sequence diagram
Source: 计算机系统应用
Issued Date: 2013
Issue: 11, Pages:1-6,80
Department: 中国科学院软件研究所,北京,100190
Abstract: 安全性作为软件系统的重要属性,越来越受到人们的重视。在软件开发的早期对安全性进行评估,对软件的质量控制和成本控制有着重要意义。当前的软件安全性评估主要依靠专家评审,结果的客观性及准确性常常受到专家主观意见的影响。通过使用通用知识作为评估依据,提出一种可以对 UML 顺序图形式的软件设计文档进行自动化分析的方法,可以发现软件设计中潜在的安全性漏洞。该方法可以减少结果中的主观性,同时,通过基于该方法的辅助工具的使用,可以大大提高评估效率。 As an important property of the software system, software security has drawn more and more attention. Security evaluation in the early phase of the software development is important to software quality and cost control. Current expert-based review and inspection methods can be error-prone and subjective. In this paper, we have proposed a knowledge-based security evaluation approach which can detect vulnerabilities in the UML sequence diagrams. With common knowledge as the evaluation reference, we can reduce the subjectivity in the result. We also have developed a support tool which can automatically perform most of the work in the method and improve the efficiency.
Language: 中文
Content Type: 期刊论文
URI: http://ir.iscas.ac.cn/handle/311060/17001
Appears in Collections:软件所图书馆_期刊论文

Files in This Item:

There are no files associated with this item.


Recommended Citation:
戚荣波,杜晶,杨叶. 基于通用知识的软件设计安全性评估[J]. 计算机系统应用,2013-01-01(11):1-6,80.
Service
Recommend this item
Sava as my favorate item
Show this item's statistics
Export Endnote File
Google Scholar
Similar articles in Google Scholar
[戚荣波]'s Articles
[杜晶]'s Articles
[杨叶]'s Articles
CSDL cross search
Similar articles in CSDL Cross Search
[戚荣波]‘s Articles
[杜晶]‘s Articles
[杨叶]‘s Articles
Related Copyright Policies
Null
Social Bookmarking
Add to CiteULike Add to Connotea Add to Del.icio.us Add to Digg Add to Reddit
所有评论 (0)
暂无评论
 
评注功能仅针对注册用户开放,请您登录
您对该条目有什么异议,请填写以下表单,管理员会尽快联系您。
内 容:
Email:  *
单位:
验证码:   刷新
您在IR的使用过程中有什么好的想法或者建议可以反馈给我们。
标 题:
 *
内 容:
Email:  *
验证码:   刷新

Items in IR are protected by copyright, with all rights reserved, unless otherwise indicated.

 

 

Valid XHTML 1.0!
Copyright © 2007-2019  中国科学院软件研究所 - Feedback
Powered by CSpace